To add to what dqa said, note that some people configure their proxy servers to not provide HTTP_REFERER for security reasons, so it's pretty unreliable in general use.