> Is this possible?  I'm inclined to believe her, but
> I'd like to confirm this with the HTTrack folks
> before we just let it go.

This should not be possible. Non-idempotent URLs (delete, post..) should
always be executed through POST actions, not resular "get" actions. And
httrack is never following POST actions (this is a volontary missing feature
for an obvious reason)

Otherwise a search engine crawling your site would also delete all existing
posts (unless you have strict robots.txt rules)