 |
|
Innovation award
Nominee: 2x |
This class can be used to prevent Cross-site Request Forgery (CSRF) exploits by storing token keys in database.
It can generate a random key and store it in a database record associated to the current session. It uses PEAR MDB2 database abstraction layer to support many types of databases.
The class can also check if the key is valid when the form is submitted with a token hidden input field. If it exists, the key record is deleted from the database to avoid it is reused.
|
|
| Name: |
CSRF protector |
| Base name: |
csrf_class |
| Description: |
Prevent CSRF exploits by storing keys in database |
| Version: |
1.0 |
| PHP version: |
5 |
| License: |
Public Domain |
| All time users: |
692 users |
| All time rank: |
4083 |
| Week users: |
2 users |
| Week rank: |
1303  |
| |
|
| There are not enough user ratings to display for this class. |
| |
Applications that use this class |
|
|
No application links were specified for this class.
If you know an application of this package, send a message to the
author to add a link here.
| |
 Files |
|
|
Stumble It!
Bookmark in del.icio.us
Browse all classes by 
Support forum (1)
Blog
Latest changes
User ratings
Files
