Answer the question
In order to leave comments, you need to log in
Do I need a csrf token in forms in sections of the site that are inaccessible to unauthorized users?
I thought about why the csrf token is needed in the forms, which are still checked during processing:
1 Is the user authenticated
2 Does he have the right to post in this part of the site
3 Does he not edit the post of another user
It seems that the csrf token in the form in this case is not needed? After all, all the same, when sending data from a third-party site, the post will not work? Or am I still missing something?
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question