diff --git a/main.php b/main.php
index 53dab55..558fa0b 100644
--- a/main.php
+++ b/main.php
@@ -16,6 +16,7 @@
 $enable_scene = json_decode($zbp->Config('zblogofcloudflare')->EnableScene, true);
 
 if (count($_POST) > 0) {
+    CheckIsRefererValid();
     $zbp->Config('zblogofcloudflare')->ZoneID = GetVars('ZoneID', 'POST');
     $zbp->Config('zblogofcloudflare')->APIToken = GetVars('APIToken', 'POST');