noCSRFandCORS.php

<?php
# 1337r00t\.me >> u can change it to ur own host (or u can use parse_url($_SERVER['HTTP_REFERER'],PHP_URL_HOST) function instead of regex)
if(!isset($_SERVER['HTTP_REFERER']) || !preg_match('/^(?:http(?:s)?:\/\/)?(?:[^\.]+\.)?1337r00t\.me\/(.*)/',$_SERVER['HTTP_REFERER'])){
	exit('<script>window.location.replace("'.htmlspecialchars("https://1337r00t.me/".substr($_SERVER['REQUEST_URI'],1)).'");</script>');
}
?>