It is incredibility poor form that websites are still vulnerable to these attacks. Django made CSRF protection mandatory back in 2009. http://code.djangoprojec

It is incredibility poor form that websites are still vulnerable to these attacks. Django made CSRF protection mandatory back in 2009. http://code.djangoproject.com/wiki/CsrfProtection http://code.djangoproject.com/wiki/CsrfProtection and if you operating a website that is still is use today it must also guard against these attacks. See http://www.squarefree.com/securitytips/web-developers.html#CSRF http://www.squarefree.com/securitytips/web-developers.html#C... there is absolutely no excuse for this other than incompetence or ignorance. Take your pick.