Deny ajax file access using htaccess
The Bad: Apache 🙁 X-Requested-With in not a standard HTTP Header. You can’t read it in apache at all (neither by ReWriteCond %{HTTP_X_REQUESTED_WITH} nor by %{HTTP:X-Requested-With}), so its impossible to check it in .htaccess or same place. 🙁 The Ugly: Script 🙁 Its just accessible in the script (eg. php), but you said you don’t … Read more