csrf 跨站请求伪造

转自  http://www.cnblogs.com/hyddd/archive/2009/04/09/1432744.html