Fish Wang
says to
YSITD
所以沒擋csrf的話，你可以幫別的網站登入/登出阿