You might want to consider what happens when you do this and then press the vote button ;-}

Looks luverly apart from that

Update: that's probably a little unfair ... you could try limiting the request method to POST and checking the menu_name parameter and putting a message if it isn't valid

/J\