The Code below is useful to prevent direct calling.

#Only Allow Ajax Call
if(!($_SERVER['HTTP_X_REQUESTED_WITH'] == 'XMLHttpRequest' && $_SERVER['HTTP_X_REQUESTED_WITH']))
{
    echo "Access Denied";
    exit();
}