SetEnvIf REFERER "www\.yoursite\.com" allowed_referer

<Limit GET POST PUT>
Order Deny,Allow
Deny from all
Allow from env=allowed_referer
</Limit>