[pLog-svn] Anti CSRF solution
Mark Wu
markplace at gmail.com
Thu Nov 29 08:51:58 EST 2007
Hi Matt:
I think I missed this one.
>
> The forced order of execution follows from the single
> execution of an action. You simply chain the logic here and
> force subsequent requests to have the previous one-time
> tokens as well. This set of chained single requests ensures
> that the order of the requests is preserved.
> The problem this is trying to solve is as follows: If ajax
> requests are done out of order by a user (or skipped), this
> could potentially cause problems.
This is what I want to know more, thanks!!
Mark
More information about the pLog-svn
mailing list