[donpwinston]

What else do I have to besides inserting 

PHP Code:

<input type="hidden" name="<?= csrf_token() ?>" value="<?= csrf_hash() ?>" /> 


inside my form?

[kilishan]

You could have simply used:

Code:

<?= csrf_field() ?>

The rest of the instructions are in the docs. Let me know if anything's missing there.