files i have:
1 index.html
2 ajax.php
When User clicks a button on index file, AJAX call happens with some parameters taken from index files inline jquery to ajax.php and bring data back to index.html. how can i prevent user from directly accessing the ajax.php file by typing url in browser.
I know the token thing but it seem like an hack, i want more decent way.
any help will be greatly appreciated. Thanks.
Do with $_SERVER['HTTP_REFERER'] .Its only shown on ajax call .not direct browser call
<?php
if(isset($_SERVER['HTTP_REFERER'])){
//do stiff
}else{
//include your 404 page
}
?>
As per documentation HTTP_REFERER as removed or Not trusted one.
My self HTTP_REFERER is enough.You need something different use this simple Approach
print_r($_SERVER); You could see the all param. Run both ajax and direct call.Check the difference in param.use as your wise
OR
Set Some header with in calling
