[horde] We cannot verify that this request was really sent by you.

[Chuck Hagenbuch]

Quoting Steve Devine <sd at msu.edu>:

> It's description is "check if a token for form is valid" .. so is  
> this supposed to check for cross-site scripting or some other  
> trickery?

Cross-site request forgery, specifically.

> Any suggestions on trouble shooting this?

Put in some new code to see which check it's failing, I'd think...

-chuck