securing the functions in the controller

[eluser]CI_avatar[/eluser]
Note: You cannot call a private controller function directly in your request (Ajax or non ajax request), because they are private. As an alternative, let your public function call the private functions in your controller.

I hope it will works.