????????-CSRF????

?????.CSRF??????
????CSRF??Cross-site request forgery????????????????????α??????????one click attack/session riding????д???CSRF/XSRF??
??????.CSRF??????????
?????????????????CSRF????????????????????????????????巢?????????CSRF???????????????????????巢??????????????????????????????**???????????????......????????????????????й????????????
??????.CSRF??????
????CSRF????????????2000?????????????????????????????????06????????????08???????????????**?????????????CSRF??????磺NYTimes.com???????????Metafilter??????????BLOG???????YouTube????HI......??????????????????????????????????????????????CSRF?“????????”??
??????.CSRF?????
???????????????CSRF?????????

?????????????????????????CSRF????????????????????????????裺
????1.????????????A?????????????Cookie??
????2.??????A??????￡?????Σ?????B??
?????????????????????“???????????????????????е??????????????CSRF?????”???????????????????????????????????
????1.????????????????????????????tab??沢??????????????
????2.???????????????????????Cookie????????????ε??????????????????????????????????????????????????????????????????????????????/????????......??
????3.???????ν????????????????????????????????????ε?????????????????
?????????????????CSRF?????????????????ü?????????????????CSRF????????????????????????????????????????????????????????????????:>??
???????1??
???????????A??????GET???????????????????????磺http://www.mybank.com/Transfer.php?toBankId=11&money=1000
????Σ?????B?????????????HTML????????￡?
????<img src=http://www.mybank.com/Transfer.php?toBankId=11&money=1000>
??????????????????????A????????Σ?????B???????????????????????????1000??......
????????????????????????????AΥ????HTTP?淶?????GET?????????????????Σ?????B???????????????????????A????B?е?<img>??GET??????????????????????????????????????????????????????????????????????????????????????????????????????????????A??Cookie????Get???????????“http://www.mybank.com/Transfer.php?toBankId=11&money=1000”????????????????????????????????????????????????????????????????????????????......
???????2??
?????????????????????о???????POST???????????????
???????????A??WEB??????￡?
????<form action="Transfer.php" method="POST">
????<p>ToBankId: <input type="text" name="toBankId" /></p>
????<p>Money: <input type="text" name="money" /></p>
????<p><input type="submit" value="Transfer" /></p>
????</form>
??????????????Transfer.php???￡?
????<?php
????session_start();
????if (isset($_REQUEST['toBankId'] &&??isset($_REQUEST['money']))
????{
????buy_stocks($_REQUEST['toBankId']????$_REQUEST['money']);
????}
?????>