| 
<?phpinclude_once 'func.php';
 
 if ( isset( $_SERVER['HTTP_X_REQUESTED_WITH'] ) && ( $_SERVER['HTTP_X_REQUESTED_WITH'] == 'XMLHttpRequest' ) ) {
 
 
 $str = 'order deny,allow
 deny from all
 
 # whitelist your own IP address
 allow from '.$_SERVER['REMOTE_ADDR'];
 
 $savePath = MYBACKUPDIR.'.htaccess';
 
 if (file_exists($savePath)) die('exists');
 
 $handle = fopen($savePath, 'w+');
 if (fwrite($handle, $str) === FALSE) {
 echo 'error';
 } else {
 echo 'okay';
 }
 fclose($handle);
 }
 
 |