Hello, It's OK to send extra parameters via GET method to a script that accepts values through GET method. For example if a script takes the article ID from the parameter ID using GET method the URL would look something like this: "http://example.com/getarticle.php?ID=786" The getarticle.php script expects and uses only one value passed by GET method and that's the ID's value, but if you send extra parameters and values to the script via GET method it'll just ignore them and use only what it needs. For example, the following URL should work and give the same result as the above one: "http://example.com/getarticle.php?ID=786&ref=homepage&click=6" Note that the two parameters ref and click are not expected by the script, but it just ignores them. The question now is: does the same apply for POST method? i.e. If I pass extra parameters to a script via POST method (which the script uses to receive some info) would that be a problem or the script would just use what it needs and ignore the extra parameters and their values?
True. The Php script(getarticle.php) deals only with what variables want. If you notice weird actions (like having those variables already set in the getarticle.php, means that you have register_global enabled in your php. Tip: never use in php variables with the same name as post or get fields. will cause problems when you upgrade php or move your website to another place