note 110898 added to book.hash

Hashes are important to fix CSRF vulnerabilities - for example somebody could link to the upvote arrow on this page and post a link to someplace like Reddit. Example: http://us2.php.net/manual/vote-note.php?id=XXXXX&page=function.hash-algos&vote=up Then people would visit the link in their browser (or load it an in iFrame etc) and it would upvote the link without their knowledge or consent. If a has was generated for each viewer then you couldn't accomplish this ;) ---- Server IP: 64.71.164.2 Probable Submitter: 76.72.171.134 ---- Manual Page -- http://php.net/manual/en/book.hash.php Edit -- https://master.php.net/note/edit/110898 Del: integrated -- https://master.php.net/note/delete/110898/integrated Del: useless -- https://master.php.net/note/delete/110898/useless Del: bad code -- https://master.php.net/note/delete/110898/bad+code Del: spam -- https://master.php.net/note/delete/110898/spam Del: non-english -- https://master.php.net/note/delete/110898/non-english Del: in docs -- https://master.php.net/note/delete/110898/in+docs Del: other reasons-- https://master.php.net/note/delete/110898 Reject -- https://master.php.net/note/reject/110898 Search -- https://master.php.net/manage/user-notes.php