Broken Access Control Using the Referer Header

NOTE: This post is for educational purposes only. Please use the information responsibly and legally. While analyzing a request to /index.php, I noticed that it included a Referer header,This made me curious why a simple GET request depended on a R...