Is there any way to know whether the page was called using AJAX or not?
We were using an additional variable sent with POST method, and I know about http_x_requested_with. But I’ve read somewhere on a security-related blog that both of them can be easily (?) hijacked.
So is there a secure method to know: was it an AJAX request or not?