Skip to content

Glossary: PHP Basics

CSRF (cross-site request forgery)

Also written: CSRF, cross-site request forgery

An attack where another site hides a form that posts to your page and tricks a visitor's browser into sending it. A secret CSRF token in your own form defends against it.

Where the book teaches it

Related terms

CSRF tokensessionhash_equals()