I have a question about stopping spoofed form submissions. How about if by using the $_SERVER[\'HTTP_REFERER\'] I only allow submissions to my forms coming from
$_SERVER[\'HTTP_REFERER\']
Doesn't really help. Read this: http://shiflett.org/articles/form-spoofing