tags:

views:

524

answers:

1
+1  Q: 

Is there a particular approach to prevent CSRF/XSRF with Zend Framework?

Cross-site request forgery (CSRF or XSRF) attacks provokes unauthorised actions in your web application by users you believe to be trusted.

That is surely something we would like to prevent, and I am particularly working with Zend Framework. Is there a Zend Framework approach to prevent CSRF/XSRF?

+1  A: 

Yes. Zend_Form_Element_Hash

blockhead  2009-05-25 02:30:55
Why didn't you post a link directly to http://www.noginn.com/2009/03/01/preventing-csrf-properly/ ? This some sort of shameless plug?
Mark  2009-05-25 02:33:32
He asked about Zend Framework, so I gave him a link to a component from Zend Framework which answers his question!
blockhead  2009-05-25 12:06:03
Also this was the first hit I got in google for Zend_Form_Element_Hash
blockhead  2009-05-25 12:07:49

related questions

IDE suggestions: Eclipse IDE vs. Zend Studio ( confused )
MySQL/Apache Error in PHP MySQL query
Lightweight IDE for Linux
What PHP framework would you choose for a new application and why?
Why is my ternary expression not working?
How can I get at the matches when using preg_replace in PHP?
Mechanisms for tracking DB schema changes
Wordpress theme development offline tools
Using object property as default for method property
How can I get the authenticated user name under Apache using plain HTTP authentication and PHP?
Make XAMPP/Apache serve file outside of htdocs
How do you debug PHP scripts?
PHP Variables passed by value or by reference?
Best way to implement unit testing in PHP
Connect PHP to an AS/400
Best way to access Exchange using PHP?
PHP Session Security
How do I access a remote form in php?
What's the best way to generate a tag cloud from an array? (using h1 through h6 for sizing)
Apache/PHP: error_log per Virtual Host?
How do I track file downloads with apache/PHP
How would you access Object properties from within an object method?
Flat File Databases in PHP
Best way to allow plugins for a PHP application
Latest information on PHP upcoming releases