vulnerable applications

As a developer, when you process a request from a user, how do you know that the person making the request is the legitimate user? If no systems are in place to ensure that the legitimate account owner is making the request, your web application could be vulnerable to...