Pro PHP and jQuery by Jason Lengstorf.pdf - Computer Science ...

}
/*
* Build the markup
*/
return
Event Description
$event->description
or cancel
FORM_MARKUP;
}
}
?>
private function _loadEventData($id=NULL) {...}
private function _createEventObj() {...}
private function _loadEventById($id) {...}
Adding a Token to the Form
If you look at the preceding form, there’s a hidden input named token that holds a session value, also
called token. This is a security measure to prevent cross-site request forgeries (CSRF), which are form
submissions that are faked by submitting a form to your app’s processing file from somewhere other
than the form itself. This is a common tactic used by spammers to send multiple forged entry
submissions, which is annoying, potentially harmful, and definitely undesirable.
169