JSON Security

if(!empty($_SERVER['HTTP_X_REQUESTED_WITH']) &&
        strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest') {
        header('Content-type: application/json');
        echo json_encode(array(
                            'detail_slider' => $hasil2,
                            'detail' => $hasil
            ));
        exit();
    }
    else {
        echo "Akses Langsung Ditolak !!!";
    }