RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?
| From: | Ed Lazor | Date: | Mon, 16 Aug 2004 19:29:55 +0000 |
| Subject: | RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-193997@lists.php.net to get a copy of this message | ||
> -----Original Message-----
> Definitely, but most CSRF attacks are meant to spoof a request from the
> legitimate user to some Web site where he/she already has privilege. Thus,
> the receiving site is usually as much the victim as the user.
>
> I'm not sure if that makes any sense... :-)
It does =)
-Ed