[eluser]Matalina[/eluser]
if crsf is disabled and using post with the data removed it should go thru.
if crsf if disabled and you are using get it should go thru.
if crsf is enabled and you are using post you need the crsf token or it won't go thru.
if crsf is enabled and you are using get I don't know if the token is needed or not.