Only load page if

PHP
5

Second this.

if ($_POST){
//code
}

Will stop refresh exploit (all browser requests are GET) however it won’t help with cURL.