PHP Classes

File: readme.txt

Recommend this page to a friend!
  Classes of Francesco Cirać  >  Token  >  readme.txt  >  Download  
File: readme.txt
Role: Documentation
Content type: text/plain
Description: Readme file
Class: Token
Generate and check tokens to avoid CSRF attacks
Author: By
Last change:
Date: 13 years ago
Size: 1,019 bytes


Class file image Download
== Token
== A PHP class for CSRF preventing.

= What is Token
Token is a simple to use PHP class that implements a session token system
for web applications. The purpose is to avoid CSRF (Cross Site Request 
Forgery) attacks.

= About CSRF
The Cross Site Request Forgery is a widespread vulnerability in web 
Using CSRF an attacker can make an user to do things with his own sessions.
CSRF is an underestimate threat. It is often forget while it is more
dangerous of other attacks (who cares about a stupid XSS)?
A very good paper about CSRF is at:

= Using Token
Token usage is very simple. It is explained in the example file.

= Token License
Token has not a license. Simply do what you want.
I just enjoyed coding Token, don't care about.

= Author contacts

= Credits
Token is inspired by the work of Claudio Guarnieri (nex) of PlayHack on the
Seride library (
For more information send a message to info at phpclasses dot org.