title: Can $_SERVER['SERVER_NAME'] be forged/faked?
body: <p>Can the PHP variable $_SERVER['SERVER_NAME'] be forged or faked? I was planning on using that as a security measure for form posting. I would check to make sure that variable is my site name (www.example.com). I know HTTP_REFERRER can be faked, but I wasn't sure on this one.</p>
  
  <p>Thanks!</p>