The REFERER is sent by the client’s browser as part of the HTTP protocol, and is therefore unreliable indeed. It might not be there, it might be forged, you just can’t trust it if it’s for security reasons.
If you want to verify if a request is coming from your site, well you can’t, but you can verify the user has been to your site and/or is authenticated. Cookies are sent in AJAX requests so you can rely on that.
Related Posts:
- How to use $_SERVER[‘HTTP_REFERER’] correctly in php?
- Replace ' and similar html codes with their correspondent character?
- How to prevent the “Confirm Form Resubmission” dialog?
- navigate back with PHP form submission
- How do I make a redirect in PHP?
- List of All Locales and Their Short Codes?
- How to fix “Headers already sent” error in PHP
- Whoops, looks like something went wrong. Laravel 5.0
- “Notice: Undefined variable”, “Notice: Undefined index”, and “Notice: Undefined offset” using PHP
- http://localhost:80 is not working on running Apache server through UniServer ZeroXIII
- How do I get PHP errors to display?
- Get the full URL in PHP
- How do I check if a string contains a specific word?
- How to force file download with PHP
- How to Set Category Page as Home Page in Prestashop
- Get the full URL in PHP
- How to copy a file from one directory to another using PHP?
- Getting an error when I visit http://localhost
- How can I find my php.ini on wordpress?
- PHP random string generator
- What are the differences in die() and exit() in PHP?
- Error 500: Premature end of script headers
- Cookies vs. sessions
- Expected status code 200 but received 500
- PDO with INSERT INTO through prepared statements
- Can you “compile” PHP code and upload a binary-ish file, which will just be run by the byte code interpreter?
- How to get the file extension in PHP?
- Invalid argument supplied for foreach()
- Remove the last character from a string
- Multiple file upload in php
- How to prevent Browser cache for php site
- what does a .php?id=&value=value means?
- Setting up a PHP interpreter in PhpStorm
- Get Current URL in Magento and show something
- Creating a search form in PHP to search a database?
- How do I make a simple crawler in PHP?
- Weird PHP error: ‘Can’t use function return value in write context’
- Create PDF file using PHP
- How do I get a YouTube video thumbnail from the YouTube API?
- Sort array of objects by object fields
- When to generate a new Application Key in Laravel?
- “Connection for controluser as defined in your configuration failed” with phpMyAdmin in XAMPP
- How to call function of one php file from another php file and pass parameters to it?
- SQLSTATE[HY093]: Invalid parameter number: parameter was not defined
- Is it possible to run .php files on my local computer?
- What does it mean to escape a string?
- Creating default object from empty value in PHP?
- MAMP “Apache couldn’t be started because port is in use.” AND “Can’t connect to local MySQL server through /tmp/mysql.sock
- Php include not working? function not being included
- PHP mail function doesn’t complete sending of e-mail
- Convert php array to Javascript
- phpMyAdmin ERROR: mysqli_real_connect(): (HY000/1045): Access denied for user ‘pma’@’localhost’ (using password: NO)
- Xampp Access Forbidden php
- SQLSTATE[HY093]: Invalid parameter number: number of bound variables does not match number of tokens on line 102
- File attachment with PHPMailer
- Warning: mysqli_query() expects parameter 1 to be mysqli, resource given
- Fatal error: Call to undefined function money_format()
- What does MYSQLI_NUM mean and do?
- Fatal Error: Allowed Memory Size of 134217728 Bytes Exhausted (CodeIgniter + XML-RPC)
- Laravel 5 Clear Views Cache
- phpinfo() is not working on my CentOS server
- ERROR: SQLSTATE[HY000] [2002] No connection could be made because the target machine actively refused it
- What does double question mark (??) operator mean in PHP
- How can I find the php.ini file used by the command line?
- What is the MM/DD/YYYY regular expression and how do I use it in php?
- Check if a PHP cookie exists and if not set its value
- Deprecated: mysql_query() [duplicate]
- Call to undefined function mysql_query() with Login [duplicate]
- How to integrate WordPress with Angular 8 for website?
- Is there a function to make a copy of a PHP array to another?
- Fatal error: Maximum execution time of 30 seconds exceeded
- How to POST JSON Data With PHP cURL?
- cURL request in Laravel
- htmlentities() vs. htmlspecialchars()
- PHP array printing using a loop
- How to send to BCC address when using PHPMailer to format MIME message for Gmail API?
- Fastest way to implode an associative array with keys
- PhpMailer SMTP NOTICE: EOF caught while checking if connected
- Facebook – Error parsing input URL, no data was cached, or no data was scraped
- what is $_SERVER[‘QUERY_STRING’] ? how it works?
- PHP Error : Fatal error: Constant expression contains invalid operations
- JavaScript equivalent of PHP’s in_array()
- Create a folder if it doesn’t already exist
- Implement linked list in php
- Warning: Unknown: failed to open stream: No such file or directory in Unknown on line 0
- Can I store images in MySQL
- PHP: date function to get month of the current date
- MySQL Daemon Failed to Start – centos 6
- How to make PDF file downloadable in HTML link?
- How to remove index.php from WordPress site URL
- What is a templating language?
- How to generate .json file with PHP?
- Logout button php
- Call to a member function on a non-object [duplicate]
- Generate PDF from HTML PHP
- Call to a member function fetch_assoc() on boolean in
[duplicate] - How to use Memcached with PHP7?
- Remove empty array elements
- select count(*) from table of mysql in php
- Auto increment in phpmyadmin