TalkingTom, i have been the same problem on my site, removed the referer cod from panel/core.php
Delete this
function validate_referer()
{
if ($_SERVER['REQUEST_METHOD'] !== 'POST') return;
if (@!empty($_SERVER['HTTP_REFERER'])) {
$ref = parse_url(@$_SERVER['HTTP_REFERER']);
if ($_SERVER['HTTP_HOST'] === $ref['host']) return;
}
die('Invalid request');
}
if ($rights) {
validate_referer();
}