how to secure the visual form builder from CSRF attacks?

Viewing 1 replies (of 1 total)
  • Plugin Author Matthew Muro

    (@mmuro)

    10 years, 2 months ago

    VFB protects against CSRF attacks by checking the referer.

    A more secure method would be to use $_SESSION, but not every server handles those the same so it’s a bit of a developer sand trap.

Viewing 1 replies (of 1 total)
  • The topic ‘how to secure the visual form builder from CSRF attacks?’ is closed to new replies.