diff --git a/action.php b/action.php
index e9bc277bd..e9fe8d8cd 100644
--- a/action.php
+++ b/action.php
@@ -11,7 +11,7 @@ error_reporting(E_ALL);
 
 if (@$_GET['act'] === 'dlteam') {
 	header("Content-Type: text/plain");
-	if (substr($_SERVER['HTTP_REFERER'], 0, 32) !== 'https://play.pokemonshowdown.com') {
+	if (substr(@$_SERVER['HTTP_REFERER'], 0, 32) !== 'https://play.pokemonshowdown.com') {
 		// since this is only to support Chrome on HTTPS, we can get away with a very specific referer check
 		die("access denied");
 	}