/** * Force a CSRF element into every form. */ public function __construct($action = null, $title = '', $method = null, $attr = array()) { parent::__construct($action, $title, $method, $attr); $this->hidden("csrf")->value(""); }