Csrf | Programming Ideas, Logics, Tips and Tricks

Session/Cookie alone does not secure your web application – CSRF

by Mr Me on November 13, 2009 in general

Guess what will happen if you add an image like below in your html page: <img src=”http://mail.google.com/mail/?logout&hl=en” /> It does not appear in page, but your google account in another window or another tab will get logoff. Now an external website could logout you from your gmail or orkut. IF you coded your website to [...]

0 Comments cookie, csrf, get, gmail, hack, hacker, post, safety, security, session, web application

About the author

Specialising in PHP, MVC, Agile, LAMP and iPhone Application Development, Sajith has over 5 years experience in the web programming industry during which time he has had his work featured in high profile lists on sites like Mashable. He was a talented and efficient member of the Cyber-Duck programming team, working alongside some of the best in the industry. Co-Founder of MobMe Wireless Pvt Limited, Sajith also has considerable experience in successful business management, having helped to excel the company to become listed as one of the "10 startups to watch in 2008" by the Wall Street Journal and by NASSCOM as one of the "100 most innovative companies in India", joining others like Texas Instruments, Tata Consultancy Services, Satyam and IBM. This technical blog is started three years before which now receives more than 120,000 visits each month and has more than 4000 subscribers.

Comments
Popular
Latest

jRecorder – jQuery plugin for audio recording October 26, 2011
Cetera Algorithm February 1, 2008
WordPress Page Rank Plugin April 17, 2008
ffmpeg sample code June 12, 2007
Download Youtube Videos using PHP Code May 29, 2008
Find who is invisible in gmail chat (Gtalk) November 4, 2008
WordPress Announcement – Plugin June 24, 2008
Forward this email… Earn Money !!! Fraud March 9, 2008
Contact Grabber November 6, 2008
Onclick Select All and Copy to Clipboard (javascript) October 5, 2007
Smpp library in php July 3, 2007
Show WordPress Currently Reading Posts July 12, 2008
Gmail Chat Implementation May 7, 2008
jRecorder 1.1 with Preview option is released December 14, 2011
Gmail Architecture March 26, 2008
Addtothis – WordPress Social Bookmarking Plugin April 10, 2008
Stylish Gmail Chat Status April 22, 2008
Stumble Reviews – WordPress Plugin April 24, 2008
Jmail++ , My Final Year Project April 14, 2008
Upload Files Like Gmail November 1, 2007
PHP time ago calculation February 1, 2008
Crop Image Like Orkut June 5, 2008
Requirements for a Video Website June 23, 2008
Warning before navigate away from a page July 19, 2008
Mozilla is slow ?? April 16, 2008
Celebrating 1st year of Sajithmr.com April 30, 2008
Check all checkboxes (javascript) October 5, 2007
IE (Internet Explorer) Form Tag problem July 16, 2007
Sexy Rating – WordPress Plugin June 19, 2008
Youtube Images – What an Idea !!! May 3, 2008
Google Needle – The Exclusive Tool For Google Services May 7, 2008
WordPress post via email August 18, 2008
The Project Team – Funny Quotes November 30, 2008
Check website in different browsers March 22, 2009
Php decimal to Roman number Conversion July 10, 2007
Hack the Password !!! March 3, 2008
How Gmail Video Chat Works ? November 18, 2008
Symfony V/S Codeigniter June 2, 2009
Fancybox runtime height change November 20, 2009
Amazon s3 example June 26, 2007
Simple steps to create a wordpress theme April 3, 2008
Mozilla Plugin Development February 19, 2008
PHP post without curl April 4, 2008
Pagerank Update July 28, 2008
Javascript: Check an image is Loaded or Not July 27, 2007
Platforms for developing iPhone Application March 3, 2010
Multi-language support with PHP June 6, 2010
Symfony 1.4 + Codeigniter = Symfony 2 September 8, 2010
PHP zipping algorithm June 12, 2007
Email Reading Library (Source Code) June 12, 2007

Tooltip using CSS3 – HTML5 iPhone Website Part 3 April 7, 2012
CSS 3.0 Tools – Don’t reinvent the wheel April 6, 2012
HTML5 iPhone site development – Part 1 April 5, 2012
HTML5 Audio: Browser Self Test March 23, 2012
Facebook changes App profile page January 23, 2012
Install Asterisk in Mac (including Lion) January 9, 2012
Pass parameter to an iframe embedded Fan Page in Facebook January 5, 2012
jRecorder 1.1 with Preview option is released December 14, 2011
Started writing on Buzitweet December 13, 2011
Facebook – Like to see the content November 10, 2011
AngryBirds in HTML5 (Adobe Edge) October 31, 2011
Adobe Edge – HTML5 made easy October 26, 2011
jRecorder – jQuery plugin for audio recording October 26, 2011
IVR Direct Dialler or Using Comma in Dialling a number October 20, 2011
Tips to hide any document inside a JPG file (image) : 2 simple steps October 19, 2011
Very useful Skype emoticons (Additional emoticons) October 18, 2011
Adobe Air 3 Beta for Flash Builder October 8, 2011
Mr Me is totally new now October 7, 2011
Audio recording using Flash July 8, 2011
Find and Remove a particular folder or file in Mac/Linux July 5, 2011
QR Code Generator May 22, 2011
Install FFMPEG in MAC April 29, 2011
New URL Shortener April 22, 2011
Check Public IP in Unix (Linux) April 5, 2011
getId3 – PHP library for audio contents January 6, 2011
How to Set Up a Low Cost Office November 10, 2010
Access 401 authentication with Curl November 9, 2010
Symfony 1.4 Installation Steps October 29, 2010
Rsync, not FTP October 19, 2010
jQuery Traversing Tips October 14, 2010
Meebo Social Toolbar October 6, 2010
My Daily Apps October 4, 2010
Use OOP in PrOPer way October 1, 2010
Gtranslate – Firefox Plugin September 30, 2010
Explore a PHP class object September 30, 2010
Change web root directory in Symfony 1.4 September 29, 2010
Symfony 1.4 + Codeigniter = Symfony 2 September 8, 2010
Facebook Graph API – The missing part July 15, 2010
Facebook Graph API for PHP July 15, 2010
PHP Session problem with cloud server July 8, 2010
VARDUMP.IT – PHP remote debugging console June 11, 2010
Multi-language support with PHP June 6, 2010
Management Lessons – Funny but interesting May 22, 2010
Quick tips for https connection (Non secure content warning – IE) May 18, 2010
IE6 Transparent PNG problem May 14, 2010
jQuery Flip May 13, 2010
Algorithm for range of dates May 12, 2010
MxCheck PHP library May 11, 2010
HTML5 – Demos May 10, 2010
Facebook Styles from jQuery May 8, 2010