| Recommend this page to a friend! |
| Classes of Francesco Cirać | > | Token | > | Download .tar.gz .zip | > | > | > | |||||
|
| |||||||||||||||||||||||||||||||||||||||||||
| Detailed description | ||
| This class can be used to generate and check tokens to avoid Cross-Site Request Forgery (CSRF) attacks. It generates random token strings and stores it as session variable associated to the time when the token was created. The generated token be used to pass in an hidden input form for later verification against CSRF attacks. The class can also check if the token is valid by looking at the respective session variable and verifying whether it did not pass more time than a configurable token timeout value. |
| Groups | ||
| HTML | HTML generation and processing | View top rated classes | |
| PHP 5 | Classes using PHP 5 specific features | View top rated classes | |
| User Management | User records, authentication and session handling | View top rated classes | |
| Security | Security protection and attack detection | View top rated classes |
| Applications | ||||||
No application links were specified for this class.
|
|||||||||||||||||||||||||||||||||