Home/ Questions/Q 7689207
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-31T20:06:39+00:00

I just started learning about CSRF. As per OWASP CSRF Article CSRF is an

  • 0

I just started learning about CSRF.
As per OWASP CSRF Article

CSRF is an attack which forces an end user to execute unwanted actions on a web application in which he/she is currently authenticated

If a website doesn’t accept any user authentication or if authentication information is not stored in cookies does that mean that it is not vulnerable to CSRF.

I developed a website which asks user to enter his ticket information, checks info with database, if correct user will be navigated to a page where he needs to provide his credit card information and his record will be updated. Do I need to worry about CSRF? Or ticket information itself is considered as authentication?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You have to worry about cross site request forgery if your site uses sessions that allow users to do privileged actions. Since I assume that you create a session property indicating that the user’s ticket info is valid, yes you do.

    • 0