A referring URL instead of IP authentication?

I was wondering if you use a referring URL instead of IP authentication.

Hi,

Using a referral url would be risky as someone can spoof the redirect url using environment variables.

E.g. someone can use curl PHP function to connect to your website programmatically and set any referral url :
https://www.php.net/manual/en/function.curl-setopt.php