What are the potential pitfalls of using <a> tags for form submissions in PHP?

Using <a> tags for form submissions in PHP can lead to potential security vulnerabilities such as CSRF attacks. To avoid this, it is recommended to use <form> tags with appropriate CSRF tokens to validate the form submissions.

&lt;form action=&quot;process_form.php&quot; method=&quot;post&quot;&gt;
  &lt;input type=&quot;hidden&quot; name=&quot;csrf_token&quot; value=&quot;&lt;?php echo $_SESSION[&#039;csrf_token&#039;]; ?&gt;&quot;&gt;
  &lt;input type=&quot;text&quot; name=&quot;username&quot;&gt;
  &lt;input type=&quot;password&quot; name=&quot;password&quot;&gt;
  &lt;input type=&quot;submit&quot; value=&quot;Submit&quot;&gt;
&lt;/form&gt;