/**
 * Method to determine a hash for anti-spoofing variable names
 *
 * @param   boolean  $forceNew  If true, force a new token to be created
 *
 * @return  string  Hashed var name
 *
 * @since   1.6
 */
public static function getFormToken($forceNew = false)
{
    $user = Factory::getUser();
    return ApplicationHelper::getHash($user->get('id', 0) . Factory::getApplication()->getSession()->getToken($forceNew));
}