Welcome Guest, Not a member yet? Register   Sign In
CodeIgniter CSRF Protection With Ajax
#5

(This post was last modified: 09-16-2016, 11:42 AM by spjonez.)

(09-15-2016, 06:05 AM)SammieL Wrote: But the cookie is read on-click event. That's for example, when the submit button is clicked, the cookie is read. So I assume that it will always contain current csrf_token that matches the one in the server.

Cookies are static data stored in your web browser and will not update unless you tell them to. If you are regenerating CSRF tokens per request your cookie will always have the first value you gave it and not the new value after each request.
Reply


Messages In This Thread
RE: CodeIgniter CSRF Protection With Ajax - by spjonez - 09-16-2016, 11:40 AM



Theme © iAndrew 2016 - Forum software by © MyBB