MY ajax PHP Code..

[Gayner]

function MakeRequest()
{
  var xmlHttp = getXMLHttp();

  xmlHttp.onreadystatechange = function()
  {
    if(xmlHttp.readyState == 4)
    {
      HandleResponse(xmlHttp.responseText);
    }
  }

  xmlHttp.open("GET", "rofl.php", true);
  xmlHttp.send(null);
}

 

and rofl.php is

:

 

mysql_query("UPDATE ibf_members SET points = points+0.25 WHERE id={$ibforums->member["id"]} LIMIT 1");

 

So my users get 0.25 Forum Cash each time rofl.php is called.

 

But i want my javascript to beable to hide that "rofl.php" so my users cant view source and find it and just keepr efreshing

[Garethp]

You can't. You have to build some sort of validation into your rofl.php to prevent spamming

[Gayner]

You can't. You have to build some sort of validation into your rofl.php to prevent spamming

 

What about this:

http://www.w3schools.com/jsref/jsref_encodeURI.asp ?

[Garethp]

Look at the tutorial, anyone could just use decodeURI() to get the URL