---
title: "Deprecation: #69562 - Deprecate helper methods for redundant CSRF protection"
manual: "TYPO3 Core Changelog"
version: "main"
permalink: "https://docs.typo3.org/permalink/changelog:deprecation-69562"
source: "Changelog/7.5/Deprecation-69562-DeprecateHelperMethodsForRedundantCSRFProtection.rst"
typo3-version: "7.5"
typo3-major: 7
type: "deprecation"
issue: 69562
forge: "https://forge.typo3.org/issues/69562"
tags: ["PHP-API", "Backend"]
rendered: "2026-09-20T18:31:11+00:00"
---

# Deprecation: #69562 - Deprecate helper methods for redundant CSRF protection {#deprecation-69562}

See [forge#69562](https://forge.typo3.org/issues/69562)

## Description {#description}

The method `BackendUtility::getUrlToken` has been introduced as shortcut to
protect data manipulating entry points `tce_db.php` `tce_file.php` and
`alt_doc.php` from CSRF attacks. These entry points have been replaced with
proper modules or routing, which are CSRF protected by default. With this
`BackendUtility::getUrlToken` is not needed anymore and therefore has been
marked as deprecated.

## Impact {#impact}

Third party code using  `BackendUtility::getUrlToken` will trigger deprecation
log entries.

## Affected Installations {#affected-installations}

Extensions using the above code.

## Migration {#migration}

These method calls can safely be removed, when generating links to former entry
points `tce_db.php` `tce_file.php` and `alt_doc.php` with the API method
calls : `BackendUtility::getModuleUrl('tce_db')`, `BackendUtility::getModuleUrl('tce_file')`
or `BackendUtility::getModuleUrl('record_edit')`.