deal with HTTP_REFERER