RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?
| From: | Ed Lazor | Date: | Mon, 16 Aug 2004 21:26:17 +0000 |
| Subject: | RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-194007@lists.php.net to get a copy of this message | ||
> -----Original Message-----
> So now I am completely clueless as to why this particular attacks works in
> Mozilla but not in IE.
Could you describe the problem again and give full detail? I think we need
to better model the problem in order to present a more effective solution.
The link below goes to a page I found that describes CSRF a little
differently than what Chris was presenting - to give a different perspective
on things.
http://www.squarefree.com/securitytips/web-developers.html
-Ed