you should be able to work out your problem by using
menu > limits > allowed referrer
When people click on the link, the address of the page is normally provided to HFS, so you can ask HFS to refuse addresses that are not yours.
Maybe you'll need to add a final * to the string.