CODEWITHSUNDEEP
phpformstokenaccess-token
Mouner Mostafa
Mouner Mostafa

Reputation: 142

php using token inside form why token is importent

I have some question about access token hope you guy's have the answer, I did my research but for sure I didn't understand why using token is so important to secure forms. So my question is and I hope to understand that what token exactly do in forms, how it's secure form and secure it from what. And is the token Important in login form but what if I didn't use the token inside login form is that make the form unsecured.

Upvotes: 0

Views: 63

Answers (1)

Grzegorz Krauze
Grzegorz Krauze

Reputation: 1148

Access token is one of protection patterns against CSRF attack. CSRF stands for Cross-site Request Forgery. It is deeply explained here:
WIKI-CSRF

Especially take a look at Examples section and Prevention section.
In simple words this attack for example steals request with login information and lets intruder login in any time. If you have access token that is gone after session is gone or after opening the form another time, you are protected. I encourage you to read the article above.

I hope this helped.

Upvotes: 1

Related Questions