csrf_protection in codeigniter
===

I have simple login form in codeigniter (2.0.2). Frequently the following error is displayed:

**An Error Was Encountered
The action you have requested is not allowed.**

After short research I undertand that it is security issue connected with csrf_protection

In the config file my setting is the following:

$config['csrf_protection'] = TRUE;

My login form is open and closed with use of short tags, like this:

    <?= form_open("/mycontroller/checklogin/process", array("method"=>"post","class"=>"login_form")) ?>

and I am closing the form like this:

    <?= form_close() ?>

On the CodeIgniter forum I found the follwing code which some users say that it solved their problem:

    <?=form_hidden($this->security->get_csrf_token_name(), $this->security->get_csrf_hash());?>

which after adding it after the form element, do nothing. Error reamin. I am not checking this hidden field in my controller...Have no idea should I??

I am not running form validation library in my controller. Should I?

Any help will be deeply appreciated.

Regards,Zoran

 