Mislav wrote a great post on how to do this robustly: http://mislav.uniqpath.com/2011/03/click-hijack/
Hope that helps!