note 110899 deleted from function.md5 by danbrown
| From: | danbrown@php.net | Date: | Thu, 17 Jan 2013 15:33:01 +0000 |
| Subject: | note 110899 deleted from function.md5 by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-193157@lists.php.net to get a copy of this message | ||
Note Submitter: mandatoryprogrammer at reddit
----
A random MD5 hash could be used per session to block cross site request forgeries (CSRF)
For example:
http://us2.php.net/manual/vote-note.php?id=XXXXX&page=function.hash-algos&vote=up
You could really just link to the up arrow of this post and have my post up voted to the top easily.
But if you had a random hash for the session this could not be done!