http://www.svonberg.org/2011/12/csrfphishing-attack-originally-posted-by-markf/