Delete this
function validate_referer()
{
if ($_SERVER['REQUEST_METHOD'] !== 'POST') return;
if (@!empty($_SERVER['HTTP_REFERER'])) {
$ref = parse_url(@$_SERVER['HTTP_REFERER']);
if ($_SERVER['HTTP_HOST'] === $ref['host']) return;
}
die('Invalid request');
}
if ($rights) {
validate_referer();
}