I have improved the checking. Shoudn't block legit requests without Referer Header