PHPWIND8.7 how to prevent CSRF vulnerability in mobile browser Mode
CSRF is no stranger to old webmasters, but it is very unfamiliar to new webmasters. Today, we are talking about CSRF vulnerabilities like webmasters, CSRF is common in the use of user identification to endanger the website and use the website's trust in user identification and cheat the user's browser to send HTTP requests to the target site. Is a widely used website vulnerability. Well-known websites such as Gmail and YouTube all have CSRF vulnerabilities. If they are in official stores, they are under cross-site Request Forgery (CSRF) attacks, attackers inject additional network requests through the user's browser to undermine the integrity of a website session. The browser's security policy allows the current page to send requests to any address. This means that when a user browses resources beyond his/her control, attackers can control the content of the page to control the browser to send specially crafted requests. After talking about so many small editors, let's talk about the solution! First find \ m \ control \ post. function checkWapPost ($ iftitle = 1) in php {Add PostCheck () under global $ subject, $ content, $ db_titlemax, $ db_postmax, $ db_postmin, $ refer; second: find \ m \ template \ post.htm and add <input type = "hidden" name = "in the header of <form id =" form1 "method =" post "action =" $ refer ">" verify "value =" $ verifyhash "/> after adding verify, You can perfectly solve the CSRF vulnerability prevention method in mobile browser mode, in addition, it is best to purchase a Safer Space provider for the sake of security.