Simon Willison’s Weblog

25th May 2010 - Link Blog

OpenCart CSRF Vulnerability. Avoid OpenCart—it’s vulnerable to CSRF, but the maintainer has no intention of fixing it as “there is no way that I’m responsible for a client being stupid enough to click links in emails”.

Posted 25th May 2010 at 12 am

Recent articles

Datasette Agent - 21st May 2026
Gemini 3.5 Flash: more expensive, but Google plan to use it for everything - 19th May 2026
The last six months in LLMs in five minutes - 19th May 2026

This is a link post by Simon Willison, posted on 25th May 2010.

csrf 54 security 604 recovered 213 opencart 1

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe