I added a failsafe until I get the admin pages all fixed that will keep the servers from being disabled if HTTP_REFERER is not set or turned off by the browser accessing the page in question.
"Therefore He is also able to save to the uttermost those who come to God through Him, since He ever lives to make intercession for them." Hebrews 7:25