So, I’m currently working on a hopefully bullet-proof security client system with all kinds of security added for free on GitHub ->https://github.com/BlackVikingPro/xml-client-system

I’ve come to notice that CSRF is one of the many different attacks possible on a web app such as this one..
So, I did some reading on OWASP about CSRF prevention. I didn’t really find anything helpful or learn anything
that I didn’t already know about CSRF.

My question is.. for PHP programmers.. how would an anti-CSRF system work?
I would think you can just test to see if your page is being loaded through an iframe on
a seperate HTML/PHP document on a different server, then just handle that accordingly.

Though I’ve never protected something against CSRF, this would be a first time doing so :)

P.S. I saw some things on DVWA (Damn Vulnerable Web App) that protect against CSRF.. Would this what I should do?