title: preventing csrf in php
body: <ol>
  <li><p>Requiring authentication in GET and
  POST parameters, not only cookies;</p></li>
  <li><p>Checking the HTTP Referer header;</p></li>
  </ol>
  
  <p>saw this post on wikipedia and was wondering how I can apply them</p>
  
  <p>ok...I am using the Kohana PHP framework and I have the facility to determine the referrer header, but what exactly do I check in the referrer header? the framework function only returns the URL of the referrer</p>
  
  <p>and how do I validate GET and POST params? against what? stored information? expected type?</p>