Web Development

Ask something
Question Locked

How to stop Malicious POST requests

0 helpful
1 reply

by echida

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a django rest backend and a vueapp client, I'm sending POST requests from the client side to django database, how can I limit users so they cant send the request unless they are on my website?
So far I've found out about csrf tokens but not sure how to implement it here. Is there a way to solve this?

1 reply

by rproffitt edited

This is a well discussed area but at no time do you use the user data (via post or otherwise) directly to the usual SQL code.

As to CRSF why not use that? I never bothered but used a simple login so we know who is adding or using data. I'll stop here since a google about CRSF TUTOTIALS seems well down.

This discussion is closed to new replies.