I think you misunderstand what csrf is. Here it is in layman terms http://crazyviraj.blogspot.com/2009/10/xsrfcsrf-attacks-in-n...