Recommend this page to a friend! |
Download .zip |
Info | View files (3) | Download .zip | Reputation | Support forum (1) | Blog | Links |
Last Updated | Ratings | Unique User Downloads | Download Rankings | |||||
2009-07-10 (7 years ago) | Not enough user ratings | Total: 1,140 This week: 2 | All time: 3,191 This week: 591 |
Version | License | PHP version | Categories | |||
token 1.0.0 | Public Domain | 5.0 | HTML, PHP 5, User Management, Security |
Description | Author | |||||||||||||
This class can be used to generate and check tokens to avoid Cross-Site Request Forgery (CSRF) attacks. |
|
== Token == A PHP class for CSRF preventing. = What is Token Token is a simple to use PHP class that implements a session token system for web applications. The purpose is to avoid CSRF (Cross Site Request Forgery) attacks. = About CSRF The Cross Site Request Forgery is a widespread vulnerability in web applications. Using CSRF an attacker can make an user to do things with his own sessions. CSRF is an underestimate threat. It is often forget while it is more dangerous of other attacks (who cares about a stupid XSS)? A very good paper about CSRF is at: http://citp.princeton.edu/csrf/. = Using Token Token usage is very simple. It is explained in the example file. = Token License Token has not a license. Simply do what you want. I just enjoyed coding Token, don't care about. = Author contacts Website: http://sydarex.org Email: sydarex@gmail.com = Credits Token is inspired by the work of Claudio Guarnieri (nex) of PlayHack on the Seride library (http://www.playhack.net). |
Files |
File | Role | Description |
---|---|---|
example.php | Example | Example script |
readme.txt | Doc. | Readme file |
token.class.php | Class | Token class file |
Version Control | Unique User Downloads | Download Rankings | |||||||||||||||
0% |
|
|
User Comments (1) | |||||
|
Applications that use this package |
If you know an application of this package, send a message to the author to add a link here.