Groups
Groups
Sign in
Groups
Groups
Nashville PHP User Group
Conversations
Labels
About
Send feedback
Help
Generating Secure CSRF Tokens
11 views
security
Skip to first unread message
Ben Ramsey
unread,
Feb 15, 2013, 12:47:10 PM
2/15/13
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to nashvi...@googlegroups.com
Continuing our web application security discussion from Jason's talk on Tuesday, I thought this might be interesting to share with everyone:
http://www.eschrade.com/page/generating-secure-cross-site-request-forgery-tokens-csrf/
This post doesn't explain cross-site request forgeries, though. If you're interested in reading more about that, I recommend Chris Shiflett's book Essential PHP Security:
http://shop.oreilly.com/product/9780596006563.do
Chris has also posted an article on his website about CSRF:
http://shiflett.org/articles/cross-site-request-forgeries
-Ben
Reply all
Reply to author
Forward
0 new messages