- removed PHP for referer
- block loop if it come from "action=showlogin"