How important CSRF is in a Web site

The younger brother is to learn Python, today on the Internet to see a mall website, just yesterday learned the CSRF cross-site request, on this mall site conducted a wave of testing

You can see the layout of the page is still very good, and then go to the registration page to see

And then we started testing.

The normal request is to return the string above JSON

Then use postman to test, the front of the Csrftoken to carry out the test, found that, unexpectedly passed the

And then the csrftoken removed, and then post, unexpectedly passed the

This shows that the site back-end of the buddy, and did not perform CSRF verification. If you write a program, Loop post, I believe that will not be long, this mall website SMS balance is not enough

About CSRF How to check, next time.

How important CSRF is in a Web site