How do I prevent direct controller function access?

[eluser]Kraig[/eluser]
Ok...so if I have a form and some ajax then I use the underscore and take off the public so it's function _someFunc() it should work? I'm not even sure how you would check in MY_Controller. If routes and the underscore don't work then what I did above would have to do the trick huh...