Protecting forms from CSRF

28 Oct 2026 · 7 views

Cross-site request forgery tricks a browser into sending a request you did not intend.

Store a random token in the session and check it on every POST.

Glossary terms in this article

Ask a question