Home/ Questions/Q 7174229
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-28T15:59:28+00:00

I dont know if this possible But I have an ajax function in my

  • 0

I dont know if this possible

But I have an ajax function in my javascript and as all, we know we need to provide php file path in the ajax request and this will be visible to all the users and unfortunately they can see the path of the ajax files and where they are stored .but i dont want this to happen i dont want user or client to see my ajax filed Is there a way to hide this path from the client, from seeing the path of ajax files? i know its something obfuscation but i only want the path to be done is it possible?

Update

so is there any way to stop user from viewing or opening php files from the url, I mean if user enters the path of ajax files and hits enter he can see all my files over there and he can easily hack my data so is there a way to stop user from entering them , i want only my pages to access php files not from users url,Thanks

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    It is not possible. The browser has to request the URI. The user can see what resources their browser is requesting.

    “Ajax files” are not a special case. You need to secure them in exactly the same way as any other resource you provide over HTTP. i.e. use authentication and authorisation to make sure that only users who are allowed to access them do, input validation to make sure that any data sent to them is acceptable, and escaping to make sure that the data doesn’t cause you problems if you try to insert it into SQL/HTML/JS/any other data format.

    Response to update:

    so is there any way to stop user from viewing or opening php files from the url

    Still No!

    I mean if user enters the path of ajax files and hits enter he can see all my files over there

    You can configure your server to not serve a DirectoryIndex. The specifics depend on the server. Alternatively you can put a blank index.html file there.

    and he can easily hack my data

    How?

    so is there a way to stop user from entering them

    No.

    i want only my pages to access php files not from users

    Only an HTTP client can request a URI. There is no way to distinguish between an HTTP client responding to an instruction from JavaScript that you have written from one that is responding to user input.

    • 0