Comment by yashafromrussia

What kind of API design is this? Post data should be sent within the request's body over HTTPS. Not as a url query.