Wouldn't his proposed method of returning nothing when URL==referer "destroy" a form that posts to itself (action="." or "")?