Comment by tzury

Does your solution assumes referrer will not be manipulated on the client side?