Question

i’ve a jquery script which post/get data to .php script. but i wanna prevent direct access to the php script. for example if the user look at the html source code,they will be able to access the php script directly by copying the url from the js file and i dont want that. how do i prevent users from doing that?? i want the user to use it via the html UI. i’ve google but found no link on this. however, i did notice that some popular websites are able to do that. how should i go about doing this??

Answer 1

It seems like a simple redirect is what you’re looking for here.

Add something like this to the top of your php file. This will prevent the page from being accessed if the proper post has not been made. Of course you’ll have to change the post and redirect to content more relevant to your project.

if (!isset($_POST['data'])) {
    header('Location: your-redirect-location');
}

You may also be able to redirect based on the $_SERVER[‘HTTP_REFERER’] variable.

EDIT: I was going to explain this in a comment but it’s too long. I should note that this is a simple solution. It will keep people from accidentally accessing your script. It’s really difficult to create a 100% secure solution for your issue, and if somebody really wants to access it, they will be able to. If you don’t have anything secure in the script in question, this will be fine. Otherwise, you’ll have to look for an alternative.