What is CSRF (Cross Site Request Forgery) attack ?

CSRF is a short term for Cross Site Request Forgery and pronounced as "SEE-Surf", is a sort of attack in which a hacker or an intruder hijacks a person's session to steal his credentials in order to use his identity to send malicious code on to the server through that person's credentials. Unlike from XSS attack in CSRF attack an intruder uses another person's account instead itself. We can also say that CSRF attack is an extension of XSS attack.
In CSRF attack intruders hacks our cookies and use those who are still valid to exploit.

How to prevent CSRF attacks in order to save yourself?

In order to keep your application protected from CSRF attack generate a new session Id and assign it to the user on every request. Always assign an expiry to your cookies in order to save the user's session hijacking.

So we have learned now, What is CSRF (Cross Site Request Forgery) attack? And how to prevent these CSRF attacks in order to save your application, keep learning from computerflicks. Please leave comments.