private function validateCSRF()
{
// Check for CSRF token and that we have a valid request method
if (Config::get("system.checkCSRF") == true && !CSRF::isValid($this->_requestMethod)) {
if (!CSRF::inHistory($this->_requestMethod)) {
@$this->service('log')->error("System: CSRF Detected from " . $this->requestIpAddress());
header("HTTP/1.0 403 Forbidden");
echo "Cross site request forgery detected. Your IP has been logged";
die;
} else {
$this->msg("Duplicate form submission detected, make sure you only click buttons once");
}
}
}
