What is CSRF Protection?

CSRF stands for Cross-Site Request Forgery.
CSRF Protection is a security feature in Laravel (and all modern web frameworks) that helps prevent unauthorized or malicious requests from being made on behalf of an authenticated user.

🔄 Simple Explanation (Hindi + English)

🔸 English:

CSRF is an attack where a user is tricked into submitting a request they didn’t intend to. Laravel protects you from this by using CSRF tokens in forms. Only if the token matches, the request is accepted.

🔸 Hindi:

CSRF एक ऐसा हमला होता है जिसमें user को धोखे से कोई ऐसा request भेजने के लिए मजबूर किया जाता है जिसे वह खुद नहीं करना चाहता। Laravel इससे बचाव के लिए हर form में CSRF token देता है, जो हर session के लिए unique होता है। अगर यह token valid नहीं है तो Laravel उस request को reject कर देता है।

✅ Real-World Example (Hindi + English):

✅ Imagine:

You’re logged into your bank account. If someone sends you a fake form that transfers money from your account, without CSRF protection, it might actually go through.

But with CSRF protection:

• Laravel adds a hidden token in every form.
• When the form is submitted, Laravel checks the token.
• If it doesn’t match → request is rejected.

✅ Syntax in Laravel Blade:

bladeCopyEdit<form method="POST" action="/submit">
    @csrf   <!-- This adds the CSRF token automatically -->
    <input type="text" name="name">
    <button type="submit">Submit</button>
</form>