Defending against CSRF attacks

Hello There! Hope you read my previous blog post about what Cross-site Request Forgery attacks is. In case you didn’t this is the link to my previous post What is CSRF? In this article I’m going to show you how to mitigate CSRF attacks from happening since it has been a major issue in the past […]

What is Cross-Site Request Forgery?

Cross Site Request Forgery (CSRF) also known as one click attack or session riding is a type of malicious exploit of a website where unauthorized commands are transmitted from a user that the web application trusts [1]. This is an attack that forces an end user to execute unwanted actions on a web application in which they’re currently authenticated [2]. When creating a […]

Social login using OAuth 2.0

According to Wikipedia “Social login is a form of single sign-on using existing information from a social networking service such as Facebook, Twitter or Google+, LinkedIn to sign into a third party website instead of creating a new login account specifically for that website” [4]. With the help of social login you don’t have to remember all your usernames and passwords when you’re creating new […]