Hi Bruno,
The reliability of HTTP_REFERER lies with the browser vendor. Most browsers WILL send the referer header, but if you're trying to create a fullproof application, it might be better to attempt to send the referring url as an argument.
Kind Regards,
David