Block login through CURL PHP

It is possible if you use an engineering good for Cross-Site Request Forgery (CSRF) Prevention .

Basically, your form will have a field where you store a token which has a lifetime and is validated in the url that receives the form. CUrl will not know how to fill in the value of this field that is dynamic and generated during the%

Extremely simple example:

<?php

$token = md5(uniqid(rand(), TRUE));
$_SESSION['token'] = $token;


?>
<form action="controller.php" method="post">
<input type="hidden" name="token" value="<?php echo $token; ?>" />
<input type="submit/>
</form>

In controller.php:

<?php 
if ($_POST['token'] == $_SESSION['token']){
    /* Valid Token */
}