Sort of defeats the purpose though because a lot of browsers and servers don't set the HTTP_REFERER variable, not mention the fact that because it's a HTTP header, it can be modified.

Better off sticking with javascript (with a fallback to the HTTP header) or hard coding the links.