diff --git a/app/qrwebform.py b/app/qrwebform.py
index fb3dfb6..9b943d5 100755
--- a/app/qrwebform.py
+++ b/app/qrwebform.py
@@ -1,26 +1,29 @@
 #!/usr/bin/python3
 
 from flask import Flask, render_template, flash, request
+from flask_wtf import FlaskForm
 from wtforms import Form, TextField
+import os
 
 DEBUG = False
 app = Flask(__name__)
 app.config.from_object(__name__)
+app.config['SECRET_KEY'] = os.urandom(40)
 
-class ReusableForm(Form):
-    url = TextField("Data:")
+class QRForm(FlaskForm):
+    user_data = TextField("Dane:")
 
     @app.route("/", methods=["GET", "POST"])
     def main():
-        form = ReusableForm(request.form)
+        form = QRForm(request.form)
 
         if request.method == "POST":
-            target_url = request.form["url"]
+            data = request.form["user_data"]
         else:
             # not POST? get back to ourselves
-            target_url = request.url_root
+            data = request.url_root
 
-        return render_template("main.html", form=form, target_url=target_url, genurl="/render/")
+        return render_template("main.html", form=form, data=data, genurl="/render/")
 
 if __name__ == "__main__":
     app.run(host='::')
diff --git a/app/templates/main.html b/app/templates/main.html
index 4ab1bd3..4473f62 100644
--- a/app/templates/main.html
+++ b/app/templates/main.html
@@ -10,8 +10,9 @@
 <br/>
 <p>
 <form action="" method="post">
+	{{ form.csrf_token }}
 	<div class="input text">
-		{{ form.url.label}}	{{ form.url }} </div>
+		{{ form.user_data.label }}	{{ form.user_data }} </div>
 
 	<div class="input submit">
 		<input type="submit" value="Generate"</div>
@@ -21,8 +22,8 @@
 <hr>
 
 <p>
-<div><img src="{{ genurl }}?size=512&data={{ target_url }}"> <br/>
-	{{ target_url }}
+<div><img src="{{ genurl }}?size=512&data={{ data | urlencode }}"> <br/>
+	{{ data }}
 </div>
 </p>
 </center>