>> If that's standard as per other similar product, you should have an option to turn that off.

Well, I'm sure there's an option, but I cannot turn it off. Our network administrators have put it on and there is no possibility of having it turned off. Even our CEO can't have it done - it's blocking hom from using other websites that require it.

So, can you allow access to the WishList if we are prevented from passing the http_referrer?
Or more accurately perhaps, will you?