title: How to deal with CSRF (I guess)?
body: <p>For example, in admin cp, to delete user, there is a link - <a href="http://example.com/acp/delete-user.php?id=102" rel="nofollow">http://example.com/acp/delete-user.php?id=102</a> . When link is opened, system automatically deletes that user from database.
  Imagine, that someone sent me a link (like that) and I accidentally open it. It means, that I delete that user without knowing it. =( How to deal with it? POST method? Some tokens? And how to do it exactly. I'm just learning. =P</p>