<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />
define('CSRF_PROTECTION', true);