well i got a lil idea.. if a User know how to fake the referrer.. Can i use the IP instead of Domain !!!!?? so if he try he will do by inserting the Domain and it should not Work ! or not !
well stupid idea but maybe it works
lemme try