Do I need a captcha for csrf protection?

Question

PHP

Actually, can the bot also palm off csrf? Is it possible not to use captcha if there is csrf protection?

Answer 1

csrf is the token you will pass in the response to the request. Therefore, a bot can also receive and use it.
Well, in general, it was not invented for these purposes.

Answer 2

I don't see the connection between csrf and captcha

Answer 3

csrf does not present any obstacles for the bot. For example, I can open a site through phantomjs and programmatically hit the submit button. All required fields and cookies will be in place.
Csrf is needed so that a user already logged in to you cannot perform actions in the background when visiting the left site. Those. went to a porn site, and he spammed tweets on the sly, because the user is already logged in on twitter. To avoid this, they generate a token when the original site is opened and bind it to the user session.