Cross-Site Request Forgery (CSRF) in Plain English
tinfoilsecurity.com