Querystring

A querystring is used on websites to pass information to a web application. It is often seen as an easy, but reasonably insecure method to use. Multiple querystrings can be used in a single web request, as each can be named.

Where one querystring is being used, it may appear as: www.domain.com/product.php?=134.

In this example, the default querystring here, without a name, is being used to select a product, and display its details on the product.php page. This is typically used in online shops, although may be disguised somewhat by implementing URL Rewriting.

Where multiple querystrings are used, they may appear as: www.domain.com/product.php?dept_id=514&pf_id=4143.

In this second example, two querystrings are used, selecting both dept_id, and pf_id.