CSRF Protection
If you can teach CSRF Protection using a CSRF Protection dry-run, you know it. If you only know the heading, you don’t.
Keep CSRF Protection small. Sara should finish a CSRF Protection dry-run in a few lines, not a 40-line dump.
Skip CSRF Protection and copy-pasting CSRF Protection without a dry-run shows up in lab hour.
Use CSRF Protection when a CSRF Protection dry-run must stay clear. If a simpler PHP step works, use that instead.
If a CSRF Protection dry-run breaks under CSRF Protection, check copy-pasting CSRF Protection without a dry-run first.
Place CSRF Protection next to nearby PHP work — one CSRF Protection step Sara can write from memory is the link.
Viva for CSRF Protection: what it is → one CSRF Protection step Sara can write from memory → the mistake (copy-pasting CSRF Protection without a dry-run).
For CSRF Protection: definition + lab hour + one failure.