|
I would use #3 ...
Since PHP Sessions are server-side, how could those be "hacked"?
On the AJAX page, all you would have to do is see if that Session var was set, if not: die() , else ... do whatever it needs to do.
__________________
Full Stack Webdeveloper: HTML5/CSS3, jQuery, AJAX, ElevatedX, NATS, MechBunny, Wordpress
|