Is it safe to pass parameter to URL?

[Dandy Ling Kwong]

I follow the API express tutorial, and apparently I can update the database through the service URL. The below example is mine which I got working.

https://appery.io/apiexpress-api/rest...

My question is, is this a safe way to pass parameters? As it is passed in the URL, is it possible for anyone to intercept the data I am passing? (In this case, reportText is the sensitive information for my user)

[Alena Prykhodko]

Hello Dandy,

Sorry for delayed reply.
We need to consult developer, we'll let you know as soon as have news.

[Alena Prykhodko]

Hello Dandy,

If you use GET - parameters are sent opened.

As you use update you need to change default GET type onto PUT and then Body JSON will be available, so you will pass parameters in body not URL.

This doc will be helpful https://devcenter.appery.io/documenta...