There's a website where a person should pay to get some service/product. After a person has made a reservation/product by paid for it, I want to allow him to track the progress without having to or register or login. It'll be similar to page on airline website where one can enter their last name and the number of reservation and see its status.
I'm confused at how I should ask for a person's email and the number of reservation: by GET or POST. That is,
1) should I create 2 text boxes on "show_reservation.html" and require a person enter them -- POST.
2) or should I email them a direct link with their email and number of reservation in the url: firstname.lastname@example.org&reservation_id=1234abcd -- GET
There're advantages and disadvantages of each approach. Which one would you recommend?
In any case I'll need to email him either a full url or reservation number and the link to the page.