
Assuming referer is required, the following result was found.
Thought I'd put a note about this as I spent ages rewriting an entire system. The HTTP_REFERER environment variable can be changed by the user anyway but I was using it as an additional validation check. The only solution is to not use it for...

bc1qf6elrdxc968h0k673l2djc9wrpazhqtxw8qqp4
0xb038962F3809b425D661EF5D22294Cf45E02FebF