> For the complete documentation index, see [llms.txt](https://docs.saturncms.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.saturncms.net/1.0.0/dev/libraries-and-functions/securitymanager/cross-site-request-forgery.md).
# Cross-site Request Forgery
## About CSRF Attacks
> Cross-site Request Forgery (CSRF) is a type of malicious exploit of a web application where unauthorized commands are submitted from a user that the the web application trusts.
>
> *Wikipedia (*[*https://en.wikipedia.org/wiki/Cross-site\_request\_forgery*](https://en.wikipedia.org/wiki/Cross-site_request_forgery)*)*
This type of attack is not limited to Saturn, but it is possible unless steps are taken to prevent it.
## Preventing CSRF Attacks
{% code title="form.php" %}
```php
Login form
```
{% endcode %}
{% code title="login.php" %}
```php
use Saturn\SecurityManager\CSRF
$CSRF = new CSRF();
if ($CSRF->Check()) {
// It's safe to proceed.
} else {
// Possible CSRF attack!
}
```
{% endcode %}