php - 如何验证 JQuery/AJAX referer 以防止 CSRF？

Question

if ($_SERVER['HTTP_REFERER'] == "????")

HTTP_REFERER如果 JQuery $.post 请求到达此页面会怎样？

Answer 1

try

strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest')

Note That not all servers provide this variable

and you can read this Detecting Ajax in PHP and making sure request was from my own website