"post", 'disable_security' => FALSE, ); $vars = array_merge($defaults, $vars); $body = $vars['body']; unset($vars['body']); $vars['action'] = elgg_normalize_url($vars['action']); // @todo why? $vars['method'] = strtolower($vars['method']); // Generate a security header if (!$vars['disable_security']) { $body .= elgg_view('input/securitytoken'); } unset($vars['disable_security']); $attributes = elgg_format_attributes($vars); echo "

$body

";