07-15-2017, 11:20 AM
i done some looking into this and theres two systems worth looking at , the first is here which looks pretty outstanding :
https://github.com/mebjas/CSRF-Protector.../readme.md
and then theres the wordpress way which is based on session and user id, so one token per user per session which expires i believe after 12 or 24 hours
https://github.com/mebjas/CSRF-Protector.../readme.md
and then theres the wordpress way which is based on session and user id, so one token per user per session which expires i believe after 12 or 24 hours