Ten Security Checks for PHP, Part 1
Subject:   Register Globals on
Date:   2008-07-01 11:13:49
From:   davidrrm
Response to: Register Globals on

That's certainly not a certain test though. I could create a program to do the post and it would set HTTP_REFERER to what you are looking for.