NoCSRF

NoCSRF copied to clipboard

CSRF origin check fail

1

This line seems to be the problem with the csrf check not working not sure why though. // Check if session token matches form token if ( $origin[ $key ]...

hall500

GitHub changed the way Markdown headings are parsed, so this change fixes it. See [bryant1410/readmesfix](https://github.com/bryant1410/readmesfix) for more information. Tackles bryant1410/readmesfix#1

bryant1410

not work with ajax post

3

I check for send form with jquery ajax `$.post` method. but csrf not work for me and show always `invalid CSRF token`. JS: ``` jQuery(document).ready(function($) { $('#myform').validate({ rules: { name:...

ericfavoni

I've modified your code to generate stronger randomized strings. Compatibility with lower releases of PHP is assured by means of paragonie/random_compat

gsdefender

Every form that uploads images or documents has `enctype='multipart/form-data'` and the data that forms the body of the request gets encoded. As a result the token can't be validated.

wirespecter

multiple not workin

2

hi I try use multiple, but token is generated each page reload. so how to do that? I am doing ajax request, so I need generate a token for X...

kamov

The article doesn't seem to be available any longer on the main site, but you can find a copy here: https://web.archive.org/web/20241014135236/http://bkcore.com/blog/code/nocsrf-php-class.html

kenmorse