Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
gaika
on June 4, 2008
|
parent
|
context
|
favorite
| on:
SQL Injecting PhpMyAdmin
That's not a solution. You can read more about XSRF and how to protect against it:
http://en.wikipedia.org/wiki/Cross-site_request_forgery
nilobject
on June 4, 2008
[–]
I have my phpMyAdmin installed only on my secure site, behind HTTP authentication as well.
rcoder
on June 5, 2008
|
parent
|
next
[–]
If you're using HTTP Basic auth, your browser will happily cache the credentials and re-submit them every time when asked for the same server/realm combination. You'll need to restart your browser to clear the cached auth data.
simonw
on June 5, 2008
|
parent
|
prev
[–]
The reason CSRF is scary is that it works against those defences.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
