id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc
40	Power on/off and other dangerous stuff should be POST, not GET	geofft	ecprice	"Commands such as
https://sipb-xen-dev.mit.edu/command?back=info&machine_id=179&action=Power+off&cdrom=
should really use POST, not GET, because clients warn on resubmitting POSTDATA but not GET requests, and I wouldn't want my VM to be powered off just because I clicked Back to get to the info page and the URL actually said action=Power+off.

http://www.w3.org/2001/tag/doc/whenToUseGet.html"	defect	closed	minor		web		fixed