php - Question regarding Ajax Hacking -

All,

I have a PHP website in Z Framework and MVC. Most controller actions check whether the request is an Ajax request, otherwise they redirect the user to the home page. I am thinking of various ways to break that site, I am considering the following scenario:

1. A user creates his own PHP project on his local machine.

2. writes a JQuery ajax post request to one of the users tries to post the controller and malicious information on my site. Ex:

     $ "HTML", success: function (Html_response) {warning (html_response);}, error: Ajax ({type: 'POST', url: "https: // marketite / getinfo / getstuff", cache: incorrect, data type: Work (xhr, ajaxOptions, errorThrown) {warning (errorThrown);}});  

My question in the AJAX request given above is not the "url" attribute? I know that it takes a relative path, it is possible to break any site by sending such requests?

Thanks

It prevents the request from creating and reacting, until it is for the same host, port and protocol

it does not prevent any attacker from making any HTTP requests (manually It is trivial to create that looks like the one created by JS) and it is an attacker who likes an attacker. Users in Urod (This prevents the attacker to respond to the request).

There is no need to include PHP or any other server side language to do any attacker.

Also, is it possible to break any site by sending such a request?

It depends on how the site is written, you should apply the same security check to the URI designed to access via JavaScript, because the request directly from the browser Have been designed to reach with.