Alter database record for new user confirmation without using GET?
So, I remember from some of my previous questions that I was advised to make sure that GET requests do not actually change any records in the database as I should be using POST for that.
I just wanted to find out if that is true for getting a user to activate their account. For example, the user signs up and they receive an email with a link to click on in order to confirm their account. When they click the link, the code is verified and the database needs to update the record from something like 'inactive' to 'active'. I am doing this using a GET request. Is it okay to do this under these circumstances or is it still not correct?
I just wanted to find out if that is true for getting a user to activate their account. For example, the user signs up and they receive an email with a link to click on in order to confirm their account. When they click the link, the code is verified and the database needs to update the record from something like 'inactive' to 'active'. I am doing this using a GET request. Is it okay to do this under these circumstances or is it still not correct?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
That articles was really helpful, thanks! I am going to use the get request to check if the unique code exists in the database and then present a form if it does whereby the user needs to either input their username or password. Still deciding on which one...
ASKER