Home/ Questions/Q 7847537
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-02T17:55:52+00:00

I have a HTML form that allows users to register for my website, I

  • 0

I have a HTML form that allows users to register for my website, I recently installed reCAPTCHA onto the webpage to stop automated registration, Today someone said they think your register is at risk of a csrf attack. I’m not much of a coder or anything i just run a few small websites so i looked it up but all the examples are for things such as website actions but the only thing my form does is enter the input into the database. Is my form at risk?
If i am at risk would a simple token stop this from happening?

I could not post the code here so the form code is at http://pastebin.com/rLxAAMFQ

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    If your server-side code always demands a valid CAPTCHA (which it should) then there is absolutely no risk here. The CAPTCHA serves double duty as an anti-CSRF token as well.

    CSRF attacks revolve around the fact that the attacker knows ahead of time how to construct a request that will be deemed valid if sent by the victim. Obviously they cannot predict ahead of time what the captcha will be, otherwise we ‘d all be out in the streets killing spambots by now.

    • 0