Confirm box only works for the very last task you opened it with, so opening multiple pages with confirm boxes (such as attempting to delete a few things at one time) causes a number of problems. On some pages it gives completely random error messages, such as "Sorry but you may only delete posts which have not been replied to." or "Sorry but you can only delete your own posts." when the messages are not true.
How it could be fixed
Do not regenerate tokens for every action (just regularly).
- This method is probably the easiest, but would not be quite as secure
- The most work, but there should be no loss in security