Oct 20, 2015 · Oct 22, 2015 · Oct 22, 2015 · Dec 1, 2015 · Dec 15, 2015 · Oct 22, 2015
diff --git a/book/controller.rst b/book/controller.rst
 order of the arguments, Symfony will still pass the correct value to each
 variable.

 Checking the Validity of a CSRF Token
 -------------------------------------

 Sometimes you want to use CSRF protection in an action where you don't want to use a
 Symfony form.

 If, for example, you're doing a DELETE action, you can use the
 :method:`Symfony\\Component\\Form\\Extension\\Csrf\\CsrfProvider\\CsrfProviderInterface::isCsrfTokenValid`
 method to check the CSRF token::

    $csrf = $this->container->get('form.csrf_provider');
    $intention = 'authenticate';
    $token = $csrf->generateCsrfToken($intention);

    if (!$csrf->isCsrfTokenValid($intention, $token)) {
        // CSRF token invalid! Do something, like redirect with an error.
    }

 Final Thoughts
 --------------
Original file line number	Diff line number	Diff line change
Expand Up		@@ -794,6 +794,24 @@ Just like when creating a controller for a route, the order of the arguments of
		order of the arguments, Symfony will still pass the correct value to each
		variable.

		Checking the Validity of a CSRF Token
		-------------------------------------

		Sometimes you want to use CSRF protection in an action where you don't want to use a
		Symfony form.

		If, for example, you're doing a DELETE action, you can use the
Copy link Contributor OskarStarkOct 22, 2015 Choose a reason for hiding this comment The reason will be displayed to describe this comment to others.Learn more. DELETE in backticks? Copy link Author snoek09Oct 22, 2015 Choose a reason for hiding this comment The reason will be displayed to describe this comment to others.Learn more. I checked the docs for mentions of HTTP methods. In a sentence they are never in backticks. Copy link Contributor OskarStarkOct 22, 2015 Choose a reason for hiding this comment The reason will be displayed to describe this comment to others.Learn more. 👍
		:method:`Symfony\\Component\\Form\\Extension\\Csrf\\CsrfProvider\\CsrfProviderInterface::isCsrfTokenValid`
		method to check the CSRF token::

		$csrf = $this->container->get('form.csrf_provider');
		$intention = 'authenticate';
Copy link Member weaverryanDec 10, 2015 Choose a reason for hiding this comment The reason will be displayed to describe this comment to others.Learn more. Does it make sense to show this without showing a template? When you generate the CSRF token in the template, you would need to also include`authenticate` then, right?
		$token = $csrf->generateCsrfToken($intention);

		if (!$csrf->isCsrfTokenValid($intention, $token)) {
		// CSRF token invalid! Do something, like redirect with an error.
		}

		Final Thoughts
		--------------

Expand Down