# Protect\_from\_forgery

**URL:** <https://www.ruby-forum.com/t/protect-from-forgery/194799>\
**Category:** Rails\
**Created:** [September 10, 2010, 9:24pm UTC](https://www.ruby-forum.com/t/protect-from-forgery/194799 "2010-09-10T21:24:09Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![dennismajor1](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/43a26b/32.png) [@dennismajor1](https://www.ruby-forum.com/u/dennismajor1)\
**Post date:** [September 10, 2010, 9:24pm UTC](https://www.ruby-forum.com/t/protect-from-forgery/194799/1 "2010-09-10T21:24:09Z")

</div>

I am a newbie to Rails, coming from a PHP shop, so please excuse my  
ignorance.

I have to applications. A Codeigniter PHP app and a Rails 3.0 app. The  
rails app makes paypal api calls and the php app makes curl post calls  
to the rails app with information from a shopping cart.

How can I make this work with protect\_from\_forgery? I basically want to  
pass my own auth token from the php app (or any 3rd party app for that  
matter) to my rails app so that it knows its ok to proceed.

Thanks in advance for all help!