CSRF and double posting

CSRF and double posting

spjonez
Member
Posts: 213
Threads: 16
Joined: Oct 2014
Reputation: 10

#10

06-20-2016, 11:18 AM

Code:
$config['csrf_regenerate'] = TRUE;

Disable this setting, it adds nothing to security and will only make your life harder. Especially if you use a lot of AJAX or concurrent AJAX requests.

Messages In This Thread

CSRF and double posting - by PaulD - 06-18-2016, 11:03 PM

RE: CSRF and double posting - by skunkbad - 06-19-2016, 12:05 AM

RE: CSRF and double posting - by John_Betong - 06-20-2016, 09:25 PM

RE: CSRF and double posting - by skunkbad - 06-20-2016, 10:55 PM

RE: CSRF and double posting - by PaulD - 06-19-2016, 12:43 AM

RE: CSRF and double posting - by PaulD - 06-19-2016, 01:00 AM

RE: CSRF and double posting - by PaulD - 06-19-2016, 03:19 AM

RE: CSRF and double posting - by skunkbad - 06-19-2016, 09:30 AM

RE: CSRF and double posting - by PaulD - 06-19-2016, 03:06 PM

RE: CSRF and double posting - by skunkbad - 06-19-2016, 03:35 PM

RE: CSRF and double posting - by PaulD - 06-19-2016, 05:59 PM

RE: CSRF and double posting - by spjonez - 06-20-2016, 11:18 AM

RE: CSRF and double posting - by Narf - 06-20-2016, 12:26 PM

RE: CSRF and double posting - by spjonez - 06-20-2016, 12:37 PM

RE: CSRF and double posting - by Narf - 06-20-2016, 01:49 PM

RE: CSRF and double posting - by spjonez - 06-20-2016, 02:32 PM

RE: CSRF and double posting - by PaulD - 06-20-2016, 01:46 PM

RE: CSRF and double posting - by PaulD - 06-20-2016, 04:02 PM

RE: CSRF and double posting - by spjonez - 06-20-2016, 07:00 PM

RE: CSRF and double posting - by Narf - 06-21-2016, 03:38 AM

RE: CSRF and double posting - by spjonez - 06-21-2016, 08:54 AM

RE: CSRF and double posting - by Narf - 06-22-2016, 05:14 AM

RE: CSRF and double posting - by Martin7483 - 06-23-2016, 03:35 AM