A site vulnerable to csrf.