Another security article in Yii 2.0 Cookbook is about Cross-site request Forgery type of attack. It describes what the attack is and how Yii may protect you from it.