EllisLab/CodeIgniter — pull request #2264 by vikingjs (2013-02-19 19:08:46+00:00)
Title: Security/csrf hardening

CSRF as it stands can be easily fooled, since it only checks that the cookie and post variable match. This change hashes one of the values with a secret string so forgers cannot submit false data without knowing the secret.