MyBB Community Forums

MyBB Community Forums > Community Archive > Archived Forums > Archived Development and Support > MyBB 1.2 Series > MyBB 1.2 General Support > Why does MyBB use post hash?
Full Version: Why does MyBB use post hash?
You're currently viewing a stripped down version of our content. View the full version with proper formatting.

Ginji

2008-07-17, 02:30 PM
It seems kind of weird to ask, but why does MyBB use post hashes?

Chris W. B.

2008-07-17, 02:55 PM
Hi,

The post hash is used to prevent certain attacks, such as Cross-site request forgery. You can read more about CSRF at Wikipedia's Cross site request forgery article Smile.

Chris.

Ginji

2008-07-17, 03:11 PM
How does the CSRF relate to posts, though? (Funny to ask, but can you give me an example?)

Dennis Tsang

2008-07-17, 03:47 PM
Post hash is to associate attachments to posts, when they haven't been submitted yet (no post ID).

Chris W. B.

2008-07-17, 04:15 PM
Sorry, it seems I got mixed up with something else.

Yumi

2008-07-18, 03:35 AM
(2008-07-17, 03:11 PM)Ginji Wrote: [ -> ]How does the CSRF relate to posts, though? (Funny to ask, but can you give me an example?)
Basically "forcing" another user to post on a forum unknowingly.
MyBB Community Forums > Community Archive > Archived Forums > Archived Development and Support > MyBB 1.2 Series > MyBB 1.2 General Support > Why does MyBB use post hash?