Open jshslsky opened 11 years ago
Having the auth_token in the URL is bad because someone can right-click and copy the link or click the image and see the auth_token in the address bar.
Having the auth_token in the URL is bad because someone can right-click and copy the link or click the image and see the auth_token in the address bar.