Post
Topic
Board Wallet software
Re: Online Wallet: Sendbit
by
sendbit.io
on 10/05/2020, 14:19:44 UTC
Hello,

I have added a CSRF token on the register (client-side) the element is hidden you can right click view-source and see it for yourself the CSRF token is generated when user enter registration page and is stored in a $_SESSION variable - this will prevent any middle party in the middle of attack.

Feel free to tamper with the CSRF token on your register page Smiley

Thank you for your constructive criticism and i have given you 3 merits merit.