Category: OWASP 2010 A5
-
OWASP A5 – Cross-Site Request Forgery (CSRF) with PHP
We are going to cover Cross-Site Request Forgery (CSRF) countermeasures in this post. This is an often overlooked but potentially deadly vulnerability that can be easily remediated. CSRF is an attack that enables a malicious website to execute procedures on a web application for which the victim has already authenticated. For example, suppose a user…