about csrf

[gbk]

someone send me a pm in my forum and there was some pictures and he says that those are my html forms without csrf protection.


so idk what this mean but i want to ask you guys. thank you already

[Euan T]

Looks like another automated tool throwing up false positives as usual. Unless he can provide a proof of concept, there's almost certainly nothing wrong. MyBB uses CSRF tokens on every POST form.

[gbk]

thanks.