Hi everyone,
I'm using a password protected area in my website. I want to protect this area against
cross-site request forgery. Especially using tokens in the url, for example:
The URL now
http://www.example.com/profile.aspx?user=johndoe
The URL i want
http://www.example.com/profile.aspx?user=johndoe&token=b72834bb-f93d-4c6b-b659-122875388b1f
Must the token
change with every
request?
I don't like to repeat my code. How can i reach this? Is there a best practice?
Thanks a lot! Go to the complete details ...