New answers tagged validation
should I silently fail or explicitly inform the client of an error? Silently when dealing with attackers. Ideally you pretend success, so attackers won't change their strategy to something you can't handle.
The technique your boss has told you to use is one of the common ways of preventing cross site request forgery. I think you're probably getting confused by the multiple meanings of "hash" which in this case probably refers to a secure hash (eg SHA256) rather than a hash that you might use for a hash table.
Top 50 recent answers are included