securing the functions in the controller

[eluser]cahva[/eluser]
So actually you need to check if its an ajax call. Then use something like this(or create a helper from it if you need it more than once )

Code:

if (isset($_SERVER['HTTP_X_REQUESTED_WITH']) && $_SERVER['HTTP_X_REQUESTED_WITH']=="XMLHttpRequest")
{
    // ajax headers sent.. proceed
}
else
{
    // not an ajax request so stop
    return FALSE;
}