Disabling HTTP Referer Check fixed it. should i test it with the 'www' added into the accepted hosts?

what is the downside to turning off http referrer check?