the get method should never be used when sensitive data such as credit card is being sent to a cgi program this is because any get command will appear in the url and will be logged by any servers