Built-in Protection Against CSRF Security Attacks in PHP 7.1 - Lately in PHP podcast episode 72
By Manuel Lemos
Cross-Site Request Forgery (CSRF) are a type of security attacks that may cause user accounts to be abused, so attackers can make users perform actions inadvertently in a vulnerable site and cause serious problems to the users and the sites.
There is a new proposal for PHP 7.1 to provide built-in semi-automatic protection against CSRF attacks, so it will be easier for PHP developers to protect the sites they develop against this type of exploit.
That was one of the main topics discussed by Manuel Lemos and Arturs Sosins in the episode 72 of the Lately in PHP podcast hangout.
They also talked about other proposals for PHP 7.1, as well the election of two release managers that will take care of the steps necessary to release PHP 7.1 later this year on the planned schedule.
This article includes a transcript of the podcast summary.
Listen to the podcast, or watch the hangout video, or read the summary transcript to learn more about these interesting PHP topics.