how to protect your input hidden html

[eluser]tusukgigi[/eluser]
like this
views :
<form>
...
<input type hidden name="post_id" value="$lists['id']" />
...
</form>

(CSRF ATTACK)

I've heard using flash session data
how to create it
thanks gan