Preventing CSRF Attacks

There’s been a bit of noise in the past week about the proper way to prevent Cross-Site-Request-Forgery (CSRF) attacks. It seemed to have started with this post. There’s been discussion in the comments, and on Twitter about it, and there seems to be several opposing viewpoints on the matter. I want to start off by saying that I agree completely with the post in question. But I figured I’d write a

[cakephper]

CSRFの説明(他の攻撃との区別も含め）、PHPでの簡単な実装方法