Are there any difference in passing parameters to another page using pagereference.getparameter and manually generating querystring

Question

The 2 ways of passing parameters to another page that i know of are

1. Use the pageReference class and use its getParameter method to assign parameters

   pageReference pr = Page.page1;
   pr.getParameters().put('param1',param);
   

2. Build a url using string and pass it to pagereference class

   String url = '/apex/page1?param1=param 
   pr = new PageReference(url);pr.setRedirect(true); 
   

Are there anyother way we can pass params? What are differences in terms of best practice or performance or security

Or are they just the same?

Answer 1

They're the same, you will see any parameters added via addParameters in the URL as query parameters.

A more secure way to do it would be sharing a controller across Visualforce pages, in which case you wouldn't need to pass parameters between pages. However for this, I believe redirect needs to be false, or else it flushes the ViewState.