the get method appends the credit card number to the url this means that anyone with access to a server log will be able to obtain this information