Home/ Questions/Q 6902507
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-27T07:48:24+00:00

In my CMS, I have a page which loads lots of mini-interfaces into a

  • 0

In my CMS, I have a page which loads lots of mini-interfaces into a panel using AJAX. Those interfaces come from various PHP files in a /ajax directory.

Would it be possible somehow to only allow access to those files using ajax, and not just by browsing to them?

My concern is, of course, that someone finds out about the /ajax directory, and gets access to the core functionality of the CMS without even having to login. Of course I could import my user class and authenticate each of the AJAX files individually, but would it be possible to only allow access through AJAX?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Would it be possible somehow to only allow access to those files using ajax, and not just by browsing to them?

    No.

    You could add extra HTTP headers, or modify existing ones (such as Accept) when you make the request from JavaScript … but since you are trying to do this for security reasons, that would be insufficient.

    Of course I could import my user class and authenticate each of the AJAX files individually

    Do that. Ajax requests are not special. They are just HTTP requests. End points created for Ajax should be secured with authentication/authorization just like any other HTTP request end point.

    • 0