3 ms·
CSRF attacks are very real, but the impact is generally taken into account before calling things a "vulnerability". e.g you can have a SQL injection that's not
by ryanlol 11y ago
CSRF attacks are very real, but the impact is generally taken into account before calling things a "vulnerability".
e.g you can have a SQL injection that's not a vulnerability because the input passes through a substr($_GET["id"],1,1).