• Resolved rdagger

    (@rdagger)


    I looked at the code and I did not see any protection against CSRF attacks. I’m new to WP, but it appears to have several built-in nonce functions to address CSRF. I also noticed that you used sanitize_text_field() instead of sanitize_email() to strip the post email field (not sure if it makes a difference).
    Thanks for the great plugin. Simple is always better.

    https://www.ads-software.com/plugins/simple-basic-contact-form/

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
  • The topic ‘Cross-Site Request Forgery’ is closed to new replies.