How to make it so that when accessing through ajax there was access to the file?

Question

PHP

Hello! I ran into this problem: there is an admin panel, and there are handlers in it, which I access via ajax. The fact is that these handlers are available to everyone and everyone, and if I put a ban on the mask in htaccess, a 403 error occurs when accessing ajax. I read tips here that it’s better to put handlers outside the site root, did as advised, as a result, these files are not visible at all ( on OpenServer outside of localhost). Please help me figure it out! Thanks in advance!

Answer 1

Either anyone or no one can follow the link.
If the handler is available via ajax, it should have an authorization check. There are no other options.