Simon Willison’s Weblog

25th May 2010 - Link Blog

OpenCart CSRF Vulnerability. Avoid OpenCart—it’s vulnerable to CSRF, but the maintainer has no intention of fixing it as “there is no way that I’m responsible for a client being stupid enough to click links in emails”.

Posted 25th May 2010 at 12 am

Recent articles

We're going to need default hard budget caps on pretty much everything - 3rd October 2026
OpenAI DevDay 2026 live blog - 29th September 2026
2026 in LLMs (so far) - 27th September 2026

This is a link post by Simon Willison, posted on 25th May 2010.

csrf 54 security 638 recovered 213 opencart 1

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe