Accept request from my app only

[eluser]psycho-vnz[/eluser]
Thanks for the replys , i'll try block the external requests to app using the .htaccess file with this option

Code:

<Limit GET PUT POST>
order deny,allow
deny from all
allow from .mydomain.com
</Limit>

If doesn't work i'll try with your examples, can post a example with token?

Examples with .htaccess

http://www.md.chalmers.se/Support/Howtos/htaccess.thtml
http://www.webmasterworld.com/apache/3537686.htm

Thanks to all