This is index.html inside the root-folder

Subfolder A
Subfolder B
Subfolder C


The following input-boxes will submit their values to phptest.php with the HTTP-Method mentioned on the submit button.
form_post



ATTENTION: CSRF prepared "local" version!

form_get



ATTENTION: CSRF prepared "local" version!



This Page is intended for testing URL Access-Rules and Input Validation Rules of FortiWeb WAF inside Team Fortinets Lab.

Important: The page has to be accessed via it's 172.29.1.88 IP-Address (FortiWEB VIP), otherwise FortiWeb will be bypassed!

For CSRF protection testing just try to write form_get or form_post variables to phptest_get.php or phptest_post.php and apply corresponding protection profiles in the webprotection profiles on FortiWeb.

For questions contact sebastian.mallach@sva.de