JSON on other domains?

[letsforum]

I am using similar JSON on my website autocomplete input field.

$.ajax({
                type:'POST',
                url:mysite.com/autocomplete/'

Can someone use this URL on some other site to fetch data from my DB?

[Dormilich]

@letsforum

Can someone use this URL on some other site to fetch data from my DB?

yes.

[letsforum]

NOT good. Any way I can prevent that?

[Dormilich]

@letsforum

Any way I can prevent that?

require authentication (i.e. a login).

[letsforum]

Nice actually this function is only used by logged in users but I didn’t add any code to check for that. Great pointer thanks. Bye