The correct way to do this with asp.net-mvc? list of item comments
3 answers
I would like to point out that for security reasons you prefer not to use this approach to delete items. Always use POST to perform any modification action. Otherwise, someone might try to abuse the system by inserting an image with a link to delete.
Of course, if you just redirect users to the confirmation page and they need to click the submit button to start the operation, that will be fine.
More on Stephen Walter's blog:
ASP.NET MVC Tip # 46 - Don't use Delete Links because they create security holes
0
a source to share