|
|
|
|
Sponsored Link •
|
|
PHP Buzz Forum
PHPMaster: Preventing Cross-Site Request Forgeries 0 replies on 1 page. |
|
 |
Back to Topic List |  |
 |
Reply to this Topic | |
 |
Search Forum | |
 |
Threaded View |
| ||
Previous Topic
|
Next Topic
|
|
| Flat View: This topic has 0 replies on 1 page |
| ||||||||||||||||||
|
Previous Topic
|
Next Topic
|
|
Sponsored Links
|
Cross-site request forgery (CSRF) is a common and serious exploit where a user is tricked into performing an action he didnât explicitly intend to do. This can happen when, for example, the user is logged in to one of his favorite websites and proceeds to click a seemingly harmless link. In the background, his profile information is silently updated with an attackerâs e-mail address. The attacker can then use the websiteâs password reset feature to e-mail herself a new password and sheâs just successfully stolen the account. 