[UPHPU] receiving with $_REQUEST
std3rr at gmail.com
Thu Feb 28 16:46:52 MST 2008
On Thu, Feb 28, 2008 at 3:40 PM, Richard K Miller <richardkmiller at gmail.com>
> How do you do this? As far as I know, XMLHttpRequest() doesn't allow
> cross-domain requests. I don't know of any other way to perform a POST
> without user intervention.
It's not possible to do an implicit CSRF POST attack, you're correct.
"Insert pseudo-insightful quote here." - Some Guy
More information about the UPHPU