TalkPHP - View Single Post - Cross-Site Request Forgeries

Karl · 09-10-2007, 07:55 PM

You could, but it wouldn't really offer you much more protection against CSRF. Malicious users can also forge a POST request just as easily as a GET, I just thought the GET method made the example easier to grasp.

09-10-2007, 07:55 PM	#3 (permalink)
Karl The Reckoner Join Date: Sep 2007 Posts: 437 Thanks: 22	You could, but it wouldn't really offer you much more protection against CSRF. Malicious users can also forge a POST request just as easily as a GET, I just thought the GET method made the example easier to grasp.