PHPWIND8.7 how to prevent CSRF vulnerability in mobile browser Mode

Source: Internet
Author: User

PHPWIND8.7 how to prevent CSRF vulnerability in mobile browser Mode
CSRF is no stranger to old webmasters, but it is very unfamiliar to new webmasters. Today, we are talking about CSRF vulnerabilities like webmasters, CSRF is common in the use of user identification to endanger the website and use the website's trust in user identification and cheat the user's browser to send HTTP requests to the target site. Is a widely used website vulnerability. Well-known websites such as Gmail and YouTube all have CSRF vulnerabilities. If they are in official stores, they are under cross-site Request Forgery (CSRF) attacks, attackers inject additional network requests through the user's browser to undermine the integrity of a website session. The browser's security policy allows the current page to send requests to any address. This means that when a user browses resources beyond his/her control, attackers can control the content of the page to control the browser to send specially crafted requests. After talking about so many small editors, let's talk about the solution! First find \ m \ control \ post. function checkWapPost ($ iftitle = 1) in php {Add PostCheck () under global $ subject, $ content, $ db_titlemax, $ db_postmax, $ db_postmin, $ refer; second: find \ m \ template \ post.htm and add <input type = "hidden" name = "in the header of <form id =" form1 "method =" post "action =" $ refer ">" verify "value =" $ verifyhash "/> after adding verify, You can perfectly solve the CSRF vulnerability prevention method in mobile browser mode, in addition, it is best to purchase a Safer Space provider for the sake of security.

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.