In form submission, ASP. NET get and Post methods have the following points:
1. Get is to obtain data from the server, post is to transfer data to the server.
2. Get is to add the parameter data queue to the URL of the action attribute that submits the form, and the value corresponds to each field one by one in the form, which can be seen in the URL. Post is the HTTP post mechanism that places the fields in the form and their contents in the HTML header to the URL address that the action attribute refers to. This process is not visible to the user.
3. For Get way, server end uses Request.QueryString to obtain variable value, for post way, server end uses Request.Form to obtain the submitted data.
4. The amount of data transferred by get is small and cannot be greater than 2KB. Post transfers have a large amount of data, which is generally default to unrestricted. In theory, however, the maximum number of IIS4 is 100KB in 80KB,IIS5.
5. Get security is very low, post security is high. But the execution efficiency is better than the Post method.
Suggestions:
1, get mode of security is less than the Post method, including confidential information, the proposed use of post data submission method;
2, when doing data query, it is recommended to use get way, while doing data add, modify or delete, it is recommended to use the Post method. params, Request, request.querystring, request.form specific differences. msdn:request objectrequest
Request.Form: Gets the data submitted as post (receiving the data submitted by Form);
Request.QueryString: Gets the Address bar parameter (data submitted in Get)
Request: There are two ways in which the data submitted by the Getting method is preferred, and it will be in the QueryString, Form, The servervariable are searched sequentially. And sometimes you get different results. If you only need one of the data in a Form, but you use request instead of Request.Form, then the program will also be searched in QueryString, servervariable. If it happens that you have the same name in your querystring or servervariable, you will not get the value you originally wanted. The
Request.params is a collection of all post and get values, Request.params is actually a collection, which in turn includes the Request. QueryString, request. Form, Request.Cookies and request.servervariable. asp.net is a post Form, but simply posts itself and cannot post to another page
Use the HTML element to remove runat= "server" with submit
using the request.form["XXX" if it is not to be submitted to the order page