I've googled this for two days and I just can't find anything describing the following issue:

Let's say I have the following form on "www.example.com":

```
<form action="formProcessor.htm" method="post">
  <input name="field1" value="abc" />
  <input name="field2" value="123" />
  <input name="field3" value="etc" type="hidden" />
  <input value="Submit" type="submit" />
</form>

```

My concern is: What if somebody creates a local file simulating this form, fills in all the values manually, and then submit it to "www.example.com/formProcessor"?

**Question #1:** Is there any way to prevent this?

**Question #2:** Is this considered so-called CSRF?

I know you can try to validate the REFERRER, but I also know that this can be easily forged (just look for the "modify header" FF add-on).

If this is a basic question, please bear patience with me, I'm fairly new to website security.

Mark