title: PHP - CSRF - How to make it works in all tabs?
body: <p>I have read about how to prevent CSRF-attacks in the last days. I am going to update the token in every pageload, save the token in the session and make a check when submitting a form.</p>
  
  <p>But what if the user has, lets say 3 tabs open with my website, and I just store the last token in the session? This will overwrite the token with another token, and some post-action is going to fail.</p>
  
  <p>Do I need to store all tokens in the session, or is there a better solution to get this working?</p>