On Nov 4, 2008, at 11:02 AM, Robert Walker wrote:
> >> If it's a RESTful client that really speaks REST then you're gonna be >> in trouble. > Why would he be in trouble? What would stop him from sneaking in the > same parameter into a POST request just like Rails does? > > Verb & URL: > POST /resources/1 > > Parameters: > _method=DELETE > > Would that not work? I'm not sure since I haven't tried it. Because a real RESTful client would want to say "DELETE /resources/1" and not mess around with the hacks to trick web browsers into being able to simulate REST by passing _method. But, if all his users are using web browsers he's fine. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---
