[UPHPU] receiving with $_REQUEST

Joshua Simpson std3rr at gmail.com
Thu Feb 28 16:46:52 MST 2008


On Thu, Feb 28, 2008 at 3:40 PM, Richard K Miller <richardkmiller at gmail.com>
wrote:

>
> How do you do this? As far as I know, XMLHttpRequest() doesn't allow
> cross-domain requests. I don't know of any other way to perform a POST
> without user intervention.
>

It's not possible to do an implicit CSRF POST attack, you're correct.




-- 
-
http://stderr.ws/
"Insert pseudo-insightful quote here." - Some Guy


More information about the UPHPU mailing list