I had no idea! I just stumbled across this little gem in the CodeIgniter 2 BitBucket Repository. Built in CSRF protection for your CodeIgniter apps!

CSRF protection is a great tool that enforces a specially generated token to be passed through to POST requests, preventing people outside your site from hacking your site via a crafted POST request. It’s become a staple defence in any web application’s security arsenal.

Thanks, EllisLab!

Yes and to add a few things I have seen:

1. It works through the form_open form helper. So you need to be using it so everything is automatic.
2. If you are using ajax then you also need to pass the hash as a post param in the ajax call or it will error out.

It can apparently be passed as a hidden parameter, for those of us who do not often use the form helper:

Do you have any solution for Malware virus in Codeigniter ?

Most malwares can be found on iframes,i guess that is left to the dev’s diligence.

Oh, this is soooo nice! Much easier to implement than some of the custom coded solutions I’ve seen.