You can do that with POST too if the site doesn't have CSRF protection ;)

Kudos · on Oct 12, 2012

You cannot do it in drive-by format like you can with a GET. It's passive and can be posted almost anywhere, message boards, email, Facebook.

driverdan · on Oct 12, 2012

You can with simple JS posting a hidden iframe. This obviously won't work on 3rd party sites but works just fine from sites you control.

1qaz2wsx3edc · on Oct 12, 2012

Drive-by format, that might have to go in my hacker news dictionary of awesome.