Question

Is there a way to block external acces to a .php file (like in the URL) and allow if the .php file got called by jquery post?

Thanks!
Wouter0100

Answer 1

I assume because you say like in the URL you want to prevent GET requests.

You can put this at the top of your script to prevent people accessing it through the URL. You will then only be able to POST to it, such as jQuery POST.

<?PHP
if($_SERVER['REQUEST_METHOD']!="POST")
    header('HTTP/1.0 401 Unauthorized');
    exit;
?>

Be aware, other sources can still POST to the form as well. This method only prevents access through other methods such as GET requests. I.e. typing in the URL in the address bar.