4 ms·
Csrf-magic: Wizard CSRF Protection for PHP
- nostrademons 18y agoDjango actually makes it easier...all you have to do is add django.contrib.csrf.middleware.CsrfMiddleware to your MIDDLEWARE_CLASSES, and it protects the whole webapp. http://www.djangoproject.com/documentation/csrf/ http://www.djangoproject.com/documentation/csrf/
- aston 18y agoDon't forget to protect all of your AJAX calls, too, if they modify any backend state.