1
2
3
4
5
6
7
8
|
public function index() { $data = new stdClass(); $data ->token_name
= $this ->security->get_csrf_token_name(); $data ->token_hash
= $this ->security->get_csrf_hash(); $this ->load->view( ‘sec‘ , $data ); } |
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
|
<!doctype
html> <html> <head> <meta
charset= "utf-8" /> <title>security
check!</title> </head> <body> <form
method= "post" action= "/index.php/sec/post" > <label for = "user" >user</label> <input
id= "user" name= "user" value= "" /> <label for = "age" >age</label> <input
id= "age" name= "age" value= "" /> <input
type= "submit" value= "提交" /> <input
type= "hidden" name= "<?php
echo $token_name; ?>" value= "<?php
echo $token_hash; ?>" /> </form> </body> </html> |
1
2
3
4
5
6
7
|
public function post() { $this ->security->csrf_verify(); //csrf检查 var_dump( $_POST ); }
|
ci框架如何手动进行csrf攻击防范,布布扣,bubuko.com
原文:http://blog.csdn.net/qzfzz/article/details/38439841