CSRF Protector addresses a serious problem in Web security, the CSRF vulnerability.
CSRF, or Cross-Site Request Forgery, is a technique used by attackers to fake authenticated user data and trick servers into executing damaging operations on behalf of the user.
The CSRF Protector comes as a PHP library and Apache 2.2.x module that sets up an intermediary layer between the user and the application itself.
Unless the user's request doesn't contain a special token, the CSRF Protector will drop it (log it, redirect the user, or any other action configured via a special config.php file).
While the Apache module works on the entire server, if you can't install it for your publicly shared Web hosting accounts, then the PHP library is as good.
You'll be able to use the CSRF Protector PHP library with any per-exisiting PHP-based website and you can also install it with other projects like CMSs, blogging engines, frameworks, forums, and so on.
As you can imagine this can be a very helpful tool for anyone running a Web application that handles sensitive data, may it be in the form of information, access rights, or commercial data.
Since the purpose of the CSRF Protector project is to improve the overall security level of Web applications, both the PHP library and Apache module are quite easy to setup and can be installed by users with very few technical skills as well.
What is new in this release:
- Dummy config.php created for each test.
Comments not found