protect a file

[fxuser]

In my javascript code i use ajax so i load a php file .. then on the success i have a function where i load a file there.. the thing is how can i secure it from direct access from the browser?

 

if i type the link of the file in the browser i can access it even tho it needs other files to run so it will return me errors.. how can i disable that?

 

Thanks.

 

EDIT: i have tried to put

if(!defined("MAIN")){
die('<tt>You cannot view this file directly!</tt>');
}

 

on the file i want to protect but then when i call the ajax on the success the file doesnt load on the page that i call it and shows the above die();

[phpchamps]

Below function will check whether its a ajax request or nt..

function isAjax() {return (isset($_SERVER['HTTP_X_REQUESTED_WITH']) && ($_SERVER['HTTP_X_REQUESTED_WITH'] == 'XMLHttpRequest'));}

[fxuser]

Thanks for the reply phpchamps,ill try it , wouldnt a htaccess with Deny from all do the job aswell?

 

EDIT : it doesnt allow me to direct check it with your code .. which is the same as mine with the define("main","true");

 

but when i go to ajax and press the button i get this: You cannot view this file directly! and doesnt allow me to load the file i want when it success

[fxuser]

bump

[PFMaBiSmAd]

define("main","true"); is not the same as define("MAIN","true"); unless you set the 3rd parameter to TRUE.

 

Perhaps if you posted the actual code you put into the main file to define the constant and the code you put into the include file to check if the constant is defined.

[fxuser]

i tried defining a var in the file that i include the included file and checking if the defined var exists in the included file but that does not work.. also i tried phpchamps code above .. i putted it to a php file that i include and call it on the top of the included file where also ajax tells me that i cant load the file when on ajax success

[phpchamps]

please post the full code.

[fxuser]

please post the full code.

 

this is how the file that loads the included file is:

<?php
define("MAIN", "True");
include_once 'config.php';

$status = "0";
$id = sanitizeString($_GET['id']); //e.x ?id=user1 we get user1

 

this is how my included file starts:

<?php
include_once $_SERVER['DOCUMENT_ROOT'] . '/config.php';
check_un($_GET['id']);
$_GET['p'] = preg_replace('#[^0-9]#i', '', $_GET['p']);

[fxuser]

bump

[fxuser]

still havent found any answer regarding this issue.

 

bump

[phpfreak]

Please don't bump...

[fxuser]

I really didnt want to... but im still searching for a solution.

 

thanks.