views:

72

answers:

1

Hello,

I've read quite a few online AJAX tutorials, where they show you how to set it up, then send a request to a server side script via either GET or PUT...My question is how do I stop unwanted people/applications from accessing that same script?

For Example, Say i had a server side script that added some type of object (say a music collection) to a database...the file would be used like this

AjaxLibraryMethod.Go("mywebsite.com/myFiles/addCD.aspx?Name=MySong&Album=MyAlbum");

What is the standard method for stopping anyone/anything from using that same script not how it's intended...With the way it's set up now I could just plug that URL into my browser with whatever querystring i want and have records added to a database.

Is this something normally handled in the script (like only accept requests from certain referrers?) Is this handled in the web configuration file (no idea how that's done)..Or is this something taken care of on the actual server (IIS or Apache)?

I'm kinda lost with this, sorry if this is a noob web question, I'm not really sure what to google search for to find my answer.

Thanks, Kyle

A: 

We have a similar question which has some ideas for you.

Securing AJAX Requests via GUID

Shoban