Web Development

public class MyController : ApiController
{
    [HttpGet]
    public void DoSomething(int id)
    {
      MyBL myBL = new MyBL();
      myBl.DeleteARecord(Id);
    }
}

public class MyController : ApiController
{
    [HttpGet]
    public void DoSomething(int id)
    {
      MyBL myBL = new MyBL();
      myBl.DeleteARecord(Id);
    }
}

Kevin Marois wrote:

The word 'delete' doesn't even exist in the method. What's stopping me from calling it?

F-ES Sitecore wrote:

If you put a non-delete verb attribute on it then the framework will stop you calling it, it will return a 404.

Quote:

In particular, the convention has been established that the GET and HEAD methods SHOULD NOT have the significance of taking an action other than retrieval. These methods ought to be considered "safe". This allows user agents to represent other methods, such as POST, PUT and DELETE, in a special way, so that the user is made aware of the fact that a possibly unsafe action is being requested.

DerekT-P wrote:

It won't fail

Kevin said:

public class MyController : ApiController
{
[HttpGet]
public void DoSomething(int id)
    {
        MyBL myBL = new MyBL();
        myBl.DeleteARecord(Id);
    }
}
I've marked the method with [HttpGet], yet called a Delete method on the BL.

DerekT-P wrote:

"DoSomething" is marked up for HttpGet and he says he's calling it with HttpGet. In his method DoSomething he calls a business layer method myBL.DeleteARecord(Id) but for all we know that is just counting apples.

1. Opening a new tab for the user
2. Managing the actions of the user in that new tab
3. Closing the tab after they are done