Book Image

CodeIgniter 2 Cookbook

By : Robert Foster
Book Image

CodeIgniter 2 Cookbook

By: Robert Foster

Overview of this book

As a developer, there are going to be times when you'll need a quick and easy solution to a coding problem. CodeIgniter is a powerful open source PHP framework which allows you to build simple yet powerful full-feature web applications. CodeIgniter 2 Cookbook will give you quick access to practical recipes and useful code snippets which you can add directly into your CodeIgniter application to get the job done. It contains over 80 ready-to-use recipes that you can quickly refer to within your CodeIgniter application or project.This book is your complete guide to creating fully functioning PHP web applications, full of easy-to-follow recipes that will aid you in any aspect of developing with CodeIgniter. CodeIgniter 2 Cookbook takes you from the basics of CodeIgniter, through e-commerce features for your applications, and ends by helping you ensure that your environment is secure for your users and SEO friendly to draw in customers. Starting with installation and setup, CodeIgniter 2 Cookbook provides quick solutions to programming problems that you can directly include in your own projects. You will be moving through databases, EU Cookie Law, caching, and everything else in-between with useful, ready-to-go recipes. You will look at image manipulation using the Image Manipulation library, user management (building a simple CRUD interface), switching languages on the fly according to the user preference, caching content to reduce server load, and much more.
Table of Contents (18 chapters)
CodeIgniter 2 Cookbook
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

Preventing cross-site request forgery


A cross-site request forgery is where an attacker pretends to be a user that the website recognizes (such as a logged-in user), and the attacker is then able to access a logged-in user's profile as though they were the genuine user. There is a wealth of technical information available, such as websites, books, and so on, on how that happens, which is why we're not going to look into that here. Instead, we're going to look at how CodeIgniter mitigates against cross-site request forgeries.

How to do it...

We're going to amend one file and create two files by performing the following steps:

  1. First, we need to amend some configuration items. To do that, we'll need to open the following file: /path/to/codeigniter/application/config/config.php

    Find the following configuration options and make the amendments as listed in the table:

    Configuration Item

    Default Value

    Change to/Description

    $config['csrf_protection']

    TRUE

    Specifies whether to turn request forgery...