What is Cross-site request forgery?

Cross-site scripting is an attack where malicious code is injected into a page and runs in other visitors' browsers, stealing sessions or data.

A cookie is a small piece of data a website stores in the browser to remember something between visits, like a login or a cart.

Website security is protecting a site, its data and its visitors from attacks, through HTTPS, updated software, careful input handling, strong logins and backups.

SQL injection is an attack that slips database commands into form fields or URLs, letting an attacker read or change data the site never meant to expose.