<?xml version="1.0" encoding="utf-8"?>
<feed xml:lang="en-us" xmlns="http://www.w3.org/2005/Atom"><title>Simon Willison's Weblog: outputbuffering</title><link href="http://simonwillison.net/" rel="alternate"/><link href="http://simonwillison.net/tags/outputbuffering.atom" rel="self"/><id>http://simonwillison.net/</id><updated>2008-09-24T14:52:36+00:00</updated><author><name>Simon Willison</name></author><entry><title>csrf_protect.php</title><link href="https://simonwillison.net/2008/Sep/24/csrfprotect/#atom-tag" rel="alternate"/><published>2008-09-24T14:52:36+00:00</published><updated>2008-09-24T14:52:36+00:00</updated><id>https://simonwillison.net/2008/Sep/24/csrfprotect/#atom-tag</id><summary type="html">
    
&lt;p&gt;&lt;strong&gt;&lt;a href="http://simonwillison.net/static/2008/csrf_protect.php.txt"&gt;csrf_protect.php&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;
A PHP class for applying CSRF protection to existing PHP applications, using output buffering to rewrite any POST forms on a page. Heavily inspired by Django’s CSRF middleware. Tell me if you spot any bugs!


    &lt;p&gt;Tags: &lt;a href="https://simonwillison.net/tags/code"&gt;code&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/csrf"&gt;csrf&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/middleware"&gt;middleware&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/outputbuffering"&gt;outputbuffering&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/php"&gt;php&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/projects"&gt;projects&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/security"&gt;security&lt;/a&gt;&lt;/p&gt;



</summary><category term="code"/><category term="csrf"/><category term="middleware"/><category term="outputbuffering"/><category term="php"/><category term="projects"/><category term="security"/></entry></feed>