Question about security tokens

I am implementing the security tokens in the avelsieve and
useracl plugins.

The page that shows the filters in avelsieve has a bunch of links that
perform actions through HTTP GET, as well as some actions that are
applied through POST (such as delete rule).

The GET actions (move up,  move down etc.) can generate a lot of tokens
for a single page; with a table of 50 filtering rules, I can generate
as much as 100 - 150 tokens in a single page.

In your opinion should I use a single token for these actions? There is
still the possibility of someone clicking something in a new tab and
thus deactivating the rest of the options.

Is there a drawback in creating too many tokens at all?

Alexandros

------------------------------------------------------------------------------
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [email protected]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel