missing HTTP_REFERER, don't know where to look