I'm trying to do some csrf attack test on a site.
I found that the site protect itself from csrf by checking the http Origin header.
But I guess maybe under some conditions I can bypass the protection. The website just check if the request has the
Origin: header set to
Is it possible to set a custom Origin header in the browser using some php code?