spoofed http_referer (how to avoid?)

[Anon]

I want a form on page1 to feed a PHP script on page2. I need to ensure that page2 only recieves data from page1 and not from a spoofed form on another site. ( I am capturing localhost address in javascript and use the form to pass the value to PHP).
I could use http_referer but there are many utilities out there that can spoof the referal page (junkbusters, proxomitron, atguard...).

Is there another way to transfer a javascript variable to PHP?
Are there alternatives to using cookies or a databases to ensure that data is from MY form?
Would getenv(http_referer) work instead of $http_referer?
Thx, Doug

http://proxomitron.cjb.net/
http://www.junkbusters.com/ht/en/ijbfaq.html#Anonymity

[Anon]

Sure, make an entry in a database made of a string of random chars. Pass the record number and md5hash to the second form. Have it grab the record, hash it, and compare that to the value it was passed.