CodeIgniter Forums
CSRF Protection - Printable Version

+- CodeIgniter Forums (https://forum.codeigniter.com)
+-- Forum: Using CodeIgniter (https://forum.codeigniter.com/forumdisplay.php?fid=5)
+--- Forum: General Help (https://forum.codeigniter.com/forumdisplay.php?fid=24)
+--- Thread: CSRF Protection (/showthread.php?tid=68194)



CSRF Protection - Tagzx - 06-07-2017

CSRF protection wasn't effective enough as i simulate it, or am I lacking a validation. I've try to copy it the code that generated by the system and put it to another form. data i forge by another form added to database successfully. can you help me guys how to make validation using csrf token generated by the system. thanks in advance.


RE: CSRF Protection - Martin7483 - 06-08-2017

If you try that from the same browser the needed cookie will be present and thus validation will pass.

Try by posting the copied form from a different browser.