CSRF solution about qa-caching plugin is safety?

Wed, 22 Jul 2015 02:27:54 +0000

To PHP developers:

I am developing caching plugin for Q2A. I have one big problem about CSRF protection. I changed protection code on all forms on all pages from one time token to same session-ID (PHPSESSID) with Javascript.

My questions:

Do you think this measure is effective against CSRF attack?
Do you know any other effective way?

Thank you for your cooperation.

Question2Answer Q&A - Recent questions tagged token

CSRF solution about qa-caching plugin is safety?