Title: Comment Form CSRF Protection Author: Ayesh Karunaratne Published: فروری 21, 2019 Last modified: جولائی 23, 2023 --- پلگ انز تلاش کریں ![](https://ps.w.org/comment-form-csrf-protection/assets/banner-772x250.jpg?rev= 2035896) یہ پلگ ان **ورڈپریس کے تازہ ترین 3 ریلیزوں کے ساتھ ٹیسٹ نہیں کیا گیا ہے**۔ اب یہ برقرار نہیں رکھا جا سکتا یا معاونت نہیں کی جا سکتی اور اس کو ورڈپریس کے تازہ ترین ورژنز کے ساتھ استعمال کیے جانے پر مطابقت کے مسائل ہو سکتے ہیں۔ ![](https://ps.w.org/comment-form-csrf-protection/assets/icon-256x256.jpg?rev=2035896) # Comment Form CSRF Protection منجانب [Ayesh Karunaratne](https://profiles.wordpress.org/ayeshrajans/) [ڈاؤن لوڈ کریں](https://downloads.wordpress.org/plugin/comment-form-csrf-protection.1.4.zip) * [تفصیلات](https://ur.wordpress.org/plugins/comment-form-csrf-protection/#description) * [جائزے](https://ur.wordpress.org/plugins/comment-form-csrf-protection/#reviews) * [انسٹالیشن](https://ur.wordpress.org/plugins/comment-form-csrf-protection/#installation) * [ڈیولپمنٹ](https://ur.wordpress.org/plugins/comment-form-csrf-protection/#developers) [معاونت](https://wordpress.org/support/plugin/comment-form-csrf-protection/) ## تفصیل WordPress has a 12-year-old unfixed security vulnerability that it does not properly validate incoming comments. An attacker can trick both anonymous and logged-in users to post comments on a victim site without them realizing, while using their own credentials. See this issue for more information: https://core.trac.wordpress.org/ticket/10931 This is a tiny (fewer than 40 effect lines of code) module that adds a secure token to the comment form and validate it before accepting any comment, thus making your comment forms secure as they should\’ve been for all these years! It provides no UI – just install it, and you are all set! 1. This plugin adds a secret cryptographically-secure token to the comment form. This is a unique value and is computationally impractical to guess it. 2. Upon comment submission, the comment is rejected if the secret tokens are not present or computationally invalid. ## اسکرین شاٹس [[ [[ ## انسٹالیشن 1. Upload the plugin files to the `/wp-content/plugins/` directory, or install the plugin through the WordPress plugins screen directly. 2. Activate the plugin through the ‘Plugins’ screen in WordPress. 3. You are all set! There is nothing to configure. Your comment forms will contain the hidden token fields that will be properly validated upon submission. ## جائزے ![](https://secure.gravatar.com/avatar/94e75ac0834c4a82d796f0e9cddca1ea984daaf630e2983c630db861ea0a38a0? s=60&d=retro&r=g) ### 󠀁[Excellent plugin](https://wordpress.org/support/topic/excellent-plugin-7177/)󠁿 [Sakthivel](https://profiles.wordpress.org/saravanankanagaraj/) جون 23, 2021 I have inspected the plugin source. A great idea was implemented. thanks for the awesome plugin. it helps to fix the CSRF Tokens issue. Can you please tell me how to implement the same for search box and contact form 7 to fix the CSRF issue? Is there any hook is available? Thanks, Saravanan ![](https://secure.gravatar.com/avatar/7a1a16f68edca98149200ae2f9da796bdd37f660d92e36e5a371f6d8d18edb89? s=60&d=retro&r=g) ### 󠀁[Very useful plugin!](https://wordpress.org/support/topic/very-useful-plugin-859/)󠁿 [lounge4](https://profiles.wordpress.org/lounge4/) اکتوبر 23, 2019 Our website was "hacked” as part of the Bug Bounty program. We closed the gap with the help of this plugin. Many thanks to the developer! Unbelievable that WordPress has not closed this gap within the last 10 years! [ تمام 2 جائزے پڑھیں ](https://wordpress.org/support/plugin/comment-form-csrf-protection/reviews/) ## شراکت دار اور ڈیویلپرز “Comment Form CSRF Protection” اوپن سورس سافٹ ویئر ہے۔ مندرجہ ذیل لوگوں نے اس پلگ ان میں حصہ لیا: شراکت دار * [ Ayesh Karunaratne ](https://profiles.wordpress.org/ayeshrajans/) [“Comment Form CSRF Protection” کا اپنی زبان میں ترجمہ کریں۔](https://translate.wordpress.org/projects/wp-plugins/comment-form-csrf-protection) ### ڈویلپمینٹ میں دلچسپی ہے؟ [کوڈ براؤز کریں](https://plugins.trac.wordpress.org/browser/comment-form-csrf-protection/)، [ایس این وی ریپوزیٹری](https://plugins.svn.wordpress.org/comment-form-csrf-protection/) کو چیک کریں یا [ڈویلپمینٹ لاگ](https://plugins.trac.wordpress.org/log/comment-form-csrf-protection/) کو سبسکرائب کریں بذریعہ [آر ایس ایس](https://plugins.trac.wordpress.org/log/comment-form-csrf-protection/?limit=100&mode=stop_on_copy&format=rss)۔ ## چینج لاگ #### 1.0 * Initial release. #### 1.1 This is a minor release that contains minimal changes. * Marks the plugin as tested up-to WordPress 5.3 * Fix in `composer.json` file that it required PHP^7.2 instead of intended ^7.1 * A micro optimization in the plugin to call the lambda function directly within the CSRF check. #### 1.4 Minor release that contains several typo fixes and WordPress 6.3 compatibility ## میٹا * Version **1.4** * Last updated **3 سال پہلے** * Active installations **400+** * WordPress version ** 4.2 یا اس سے جدید ** * Tested up to **6.3.10** * PHP version ** 7.1 یا اس سے جدید ** * Language * [English (US)](https://wordpress.org/plugins/comment-form-csrf-protection/) * Tags * [comments](https://ur.wordpress.org/plugins/tags/comments/)[csrf](https://ur.wordpress.org/plugins/tags/csrf/) [security](https://ur.wordpress.org/plugins/tags/security/)[spam](https://ur.wordpress.org/plugins/tags/spam/) * [اعلی درجے کا منظر](https://ur.wordpress.org/plugins/comment-form-csrf-protection/advanced/) ## درجہ بندیاں 5 out of 5 stars. * [ 2 5-star reviews ](https://wordpress.org/support/plugin/comment-form-csrf-protection/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/comment-form-csrf-protection/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/comment-form-csrf-protection/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/comment-form-csrf-protection/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/comment-form-csrf-protection/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/comment-form-csrf-protection/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/comment-form-csrf-protection/reviews/) ## شراکت دار * [ Ayesh Karunaratne ](https://profiles.wordpress.org/ayeshrajans/) ## معاونت کچھ کہنا ہے؟ مدد چاہیے؟ [معاونتی فورم دیکھیں](https://wordpress.org/support/plugin/comment-form-csrf-protection/)