Question

Possible Duplicate:
how to protect ajaxRequest.open php script

im making a ajax call from jquery to a php script located in my own server like: $.ajax({ url: 'ajax.php', ....

Its any way to protect the execution of this file directly? I mean, some IF statement that only let the code begin if the file ajax.php is called from lets say an jquery script writen in origin.html and NOT if the file is called directly?

Thanks for any help!

Answer 1

if(!empty($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest') {
 // code that has to be executed in response to ajax req.
}

ref: AJAX only access