https://blog.khairulazam.net/2010/11/23/csrf-in-spicefuse-shoutbox-mybb/