Prevent form post/get request from another domain in PHP

cross-site post request forgery