Question

For security purposes, I want to stop the users from being able to view or send anything to the php pages I am going to use for ajax purposes.

So is there any way by which I can check whether a page has been called because of an ajax request or the page has been opened?
Does self=top consider ajax request or not?

Answer 1

/* AJAX check  */
if(!empty($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest') {
  /* special  for ajax here */
}
else
{
  //its a page request
}

this will only work when using JS frameworks that send this header :-by Bergi