Forum

Hello guys,

Wanted to hear any feedback from those use this feature (PreventCSRF), how efficient is it for you?

We started using it but I think it does block valid requests from time to time.

Has anyone had any similar problems?

Regards
Andrew.

If you have a website (A) that holds a form which upon submit is sent to another website (B) and that is by design, then you should not enable the PreventCSRF feature on website A.

Well, I wonder the following, it is safe to use this on ALL sites, without changing site configuration.

My advice is to only use it when you really need it. In other words, only if your website is vulnerable for CSRF attacks and your expect it's likely to happen.