Question

I want to prevent user to see directly PHP URL in Javascript.
Example :

{
$.ajax(
{
    type: "POST",
    url: "search.php",
    data: dataString,
    cache: false,
    success: function(html)
    {
        $("#display").html(html).show();
    }
});
}return false;

Is it possible or any way to prevent user see the php URL when He/She view the source of my page ? Sometimes user maybe try to open the php url directly.

Thanks for helps.

Answer 1

I (or any client) can still use any number of tools to figure it out (including the built-in debugger in 99% of the browsers built)–It’s not worth obfuscating it.

If you’re concerned about direct access, check for an AJAX request in your script. (Still hack-able, but it’s a start). As also provided in a previous answer:

<?php

  $isAjax = isset($_SERVER['HTTP_X_REQUESTED_WITH'])
         && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) === 'xmlhttprequest';
  if (!$isAjax) die('Unauthorized access');

  /* rest of search.php */