CSRF(Cross Site Request Forgeries)，意为跨网站请求伪造，也有写为XSRF。攻击者伪造目标用户的HTTP请求，然后此请求发送到有CSRF漏洞的网站，网站执行此请 求后，引发跨站请求伪造攻击。
和 $HTTP_RAW_POST_DATA 比起来，php://input给内存带来的压力较小，并且不需要任何特殊的 php.ini 设置。在项目应用中，如摄像头拍照，上传保存，就可以用到php://input。
在查看了 PHP 在 PHP 7.x 版本开发过程中实现的一系列特性的简要列表之后，我决定自己整合这个列表作为一个很好的补充，我相信也会有人觉得有用的。很快我们就能看到一些更好的功能，例如:命名参数。用于数组析构的方括号语法。
基于PHP的考研复习管理动态网站设计。Abstract: With the rapid development of Internet technology and website development technology， website provides some information needed by many users. The main research object of this paper is to establish dynamic website. This paper introduces how to build a dynamic website using PHP. Understand the use of PHP， on this basis also learned the related website development technology， such as HTML technology， database technology， etc. Then I studied the current PHP frameworks and chose to use Laravel among the many on the market. Finally， on Laravel framework， MySQL database is used to realize the design of dynamic website. In addition， this paper will start from the initial PHP environment installation， according to the front-end design and back-end design， using Ajax to achieve data refresh operation， so as to achieve dynamic website management. The dynamic website built in this paper is for the convenience of the students can get the basic information of the postgraduate entrance examination can also share their postgraduate entrance examination information， background management users can carry out simple operations on the data.
不久之前，我在phpBB中管理控制面板的实现代码中发现了一个CSRF(跨站请求伪造)漏洞，值得一提的是，这段代码是以BBCode风格开发的。phpBB的开发团队于2016年1月11日发布了phpBB 3.1.7-PL1，并在这个版本中修复了我之前所发现的那个CSRF漏洞。
