Disallow direct access to callback function

[eluser]someone [/eluser]
Hello!

As the title the topic says, I'm interesting to disallow direct access to callback function from user's webbrowser.

What about security - if I don't disallow direct access, is this secure?

Thanks in advance! :-)