Is it best practice to use POST instead of REQUEST in PHP login scripts?

When handling sensitive information like login credentials in PHP scripts, it is best practice to use the POST method instead of REQUEST. This is because POST data is not visible in the URL and is more secure than using REQUEST, which can also include GET data. By using POST, the login credentials are sent securely in the request body rather than being visible in the URL. 

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // Handle login credentials securely
    $username = $_POST["username"];
    $password = $_POST["password"];
    
    // Validate and authenticate the user
    // Your login logic here
}

Keywords

PHP POST REQUEST login scripts security

Related Questions