php防止站外远程提交表单的方法

<?php    
session_start();    
    
if ($_post['submit'] == "go"){    
    //check token    
    if ($_post['token'] == $_session['token']){    
        //strip_tags    
        $name = strip_tags($_post['name']);    
        $name = substr($name,0,40);    
        //clean out any potential hexadecimal characters    
        $name = cleanhex($name);    
        //continue processing....    
    }else{    
        //stop all processing! remote form posting attempt!    
    }    
}    
    
$token = md5(uniqid(rand(), true));    
$_session['token']= $token;    
    
 function cleanhex($input){    
    $clean = preg_replace("![\][xx]([a-fa-f0-9]{1,3})!", "",$input);    
    return $clean;    
}    
?>    
<form action="<?php echo $_server['php_self'];?>" method="post">    
<p><label for="name">name</label>    
<input type="text" name="name" id="name" size="20" maxlength="40"/></p>    
<input type="hidden" name="token" value="<?php echo $token;?>"/>    
<p><input type="submit" name="submit" value="go"/></p>    
</form>

if($_post['vcode'] != get_vcode())
{
    exit('验证码校验失败，无法入库');
}