Storing previous URL as session data

Storing previous URL as session data

El Forum
Guest

04-13-2010, 02:39 AM

[eluser]n0xie[/eluser]
[quote author="crikey" date="1271162160"]
My scenario:

I have a delete function which can be executed from a URL with parameter (eg. mysite.com/thing/delete/1 - where '1' is the id of the item to be deleted). That's cool.
[/quote]
This is most likely CSRF exploitable. Never do destructive actions via GET.

Messages In This Thread

Storing previous URL as session data - by El Forum - 04-13-2010, 01:36 AM

Storing previous URL as session data - by El Forum - 04-13-2010, 01:50 AM

Storing previous URL as session data - by El Forum - 04-13-2010, 02:33 AM

Storing previous URL as session data - by El Forum - 04-13-2010, 02:39 AM

Storing previous URL as session data - by El Forum - 04-13-2010, 03:51 AM

Storing previous URL as session data - by El Forum - 04-13-2010, 05:30 AM

Storing previous URL as session data - by El Forum - 04-13-2010, 02:18 PM

Storing previous URL as session data - by El Forum - 04-13-2010, 02:35 PM

Storing previous URL as session data - by El Forum - 04-13-2010, 03:17 PM

Storing previous URL as session data - by El Forum - 04-13-2010, 08:50 PM

Storing previous URL as session data - by El Forum - 04-13-2010, 11:12 PM

Storing previous URL as session data - by El Forum - 04-14-2010, 03:19 AM

Storing previous URL as session data - by El Forum - 04-14-2010, 08:31 AM

Storing previous URL as session data - by El Forum - 04-14-2010, 08:59 AM

Storing previous URL as session data - by El Forum - 04-14-2010, 09:12 AM

Storing previous URL as session data - by El Forum - 04-14-2010, 09:38 AM

Storing previous URL as session data - by El Forum - 04-14-2010, 09:53 AM