Security and App Bridging : $dolibarr_nocsrfcheck

Installing my Dolibarr
1

In my default config file I have:
$dolibarr_nocsrfcheck=‘0’;
And there are no coding comments as to what the value ‘0’ or ‘1’ or any other would mean.

Does the value ‘0’ mean that this is preventing cross scripting security issues OR does it mean that it is turn off opening the site to security issues?

This came to my attention because while trying to get the MyDoli App to to connect to Dolibarr for remote management, it would not connect unless $dolibarr_nocsrfcheck was changed to ‘1’.

So if I change it to ‘1’ for MyDoli access, am I now opening a security issue.

Thanks

2

Does anyone know about the config settings or where to find config setting information about them.

It seems strange that this has every one stumped.

3

Hi,

‘0’ means ‘Off’ and ‘1’ means ‘On’, so if you set to ‘On’ there will be NO CSRF Prevention.

4

Thank you fappels.

It seems that I will have to look for another Android App solution that keeps the security in place.