how to protect a controller function accessing by URL

[eluser]danmontgomery[/eluser]
This is covered in the user guide.

In some cases you may want certain functions hidden from public access. To make a function private, simply add an underscore as the name prefix and it will not be served via a URL request. For example, if you were to have a function like this:

Code:

function _utility()
{
  // some code
}

Trying to access it via the URL, like this, will not work:

Code:

example.com/index.php/blog/_utility/