Prevent storing and verifying fake requests sent to a php website Can a hacker through the web send a request from source A to source B while source B mistakenly thinks that the request was sent from within site B itself? Can this case be hacked if only requests sent by AJAX method are acceptable? If so, what is the solution to deal with these fake requests? Consider a comment submission form on a website that does not require authentication and is highly vulnerable. Are the following reliable to prevent circumvention of the rules? HTTP header :...