Perhaps with something as emotional as CP, sponsors may feel as though it is their duty to be proactive (or at least block traffic from such sites). However, extracting a domain from an HTTP_REFERER header is not exactly rocket science, why weren't sponsors doing this X years ago?
(and in that vein, spidering an http_referer is equally trivial).
Ask me no questions, and i'll tell you no lies.
Another technical point - what stops me framing someone, by faking hits from 'lolita.com' into his sponsors account? Or conversely, that same person claiming that he is being framed?
__________________
|