how can I secure my form from cross domain
To test the robustness of a form, the first tactic is to move it.
Through the operation of the Web offline, it is possible to take the HTML
a form in any web page and copy the source of the form
a local file.
This copy may not be immediately usable: the actions are often directed
a script that is on the form. To address this problem, just change
the action attribute to add a URL. In this way a link:

    <form action="afficher.php" method="POST">

becomes for example:

    <form action="http://www.site.com/afficher.php" method="POST">
what is the best way to protect my forms from this attacks 
how can I secure my form from cross domain
===

To test the robustness of a form, the first tactic is to move it.
Through the operation of the Web offline, it is possible to take the HTML
a form in any web page and copy the source of the form
a local file.
This copy may not be immediately usable: the actions are often directed
a script that is on the form. To address this problem, just change
the action attribute to add a URL. In this way a link:

    <form action="afficher.php" method="POST">

becomes for example:

    <form action="http://www.site.com/afficher.php" method="POST">
what is the best way to protect my forms from this attacks 