PunBB Forums — Csrf_token and Confirm_cancel ($_POST)

Re: Csrf_token and Confirm_cancel ($_POST)

null@example.com (maly_pirat) — Fri, 23 Oct 2009 13:04:55 +0000

OK, thanks for help

/Close topic ;-)

Re: Csrf_token and Confirm_cancel ($_POST)

null@example.com (Slavok) — Fri, 23 Oct 2009 06:44:21 +0000

Here the description of structure of online table.

Re: Csrf_token and Confirm_cancel ($_POST)

null@example.com (maly_pirat) — Thu, 22 Oct 2009 15:43:26 +0000

Ok, i have last question (i think so..:P)

In the prefix_online (structure) we can see "idle" please tell me, what is this?

Re: Csrf_token and Confirm_cancel ($_POST)

null@example.com (Parpalak) — Thu, 22 Oct 2009 12:16:36 +0000

http://en.wikipedia.org/wiki/Cross-site_request_forgery

Re: Csrf_token and Confirm_cancel ($_POST)

null@example.com (maly_pirat) — Thu, 22 Oct 2009 11:55:30 +0000

Ok, can you tell me what is this csrf token ?
This is to update the list online & Status Online user?

Re: Csrf_token and Confirm_cancel ($_POST)

null@example.com (Slavok) — Thu, 22 Oct 2009 07:21:30 +0000

$_POST['confirm_cancel'] - button in the CSRF-confirmation form. The constant "FORUM_SKIP_CSRF_CONFIRM" defined only in "/post.php", because at this page there is another CSRF-checking.

Csrf_token and Confirm_cancel ($_POST)

null@example.com (maly_pirat) — Wed, 21 Oct 2009 13:31:34 +0000

Hi !

I have one question about some code from include/common.php.

if (!empty($_POST) && (isset($_POST['confirm_cancel']) || (!isset($_POST['csrf_token']) || $_POST['csrf_token'] !== generate_form_token(get_current_url()))) && !defined('FORUM_SKIP_CSRF_CONFIRM'))
    csrf_confirm_form();

Where i found a $_POST['confirm_cancel'] ? and this constants "FORUM_SKIP_CSRF_CONFIRM" ?

/Sorry for my English