same as everywhere else in your apps.. ajax is no different in any way at all, not even slightly. as far as PHP and web server is concerned it's just a plain old request same as any other; thus.. if( !$_SESSION['is_logged_in'] ) { exit(); } // do stuff
Thanks for that. Sometimes the solution is right there in front of you. The bit of code below does the job nicely for me : session_start(); if(!isset($_SESSION['username'])){ echo("Go Away."); exit(); } // now work with sensitive data... -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php