HTML5 JS Android app to access apache driven server

[samvb]

For my application, i am allowing requests to come from anywhere (at development stage). It just sends ajax requests to php files on the server and it works great.

It is based upon allowing access to all request headers sent to apache, which is obviously not a good idea.

What's the work around to make only my applications request be accepted by my server? I thought of including some sort of key that is sent with every request but since it is going to be a static one, I dont think it is gonig to be secure enough.

What's the work around?

[Dormilich]

What's the work around to make only my applications request be accepted by my server?

Authentication/Authorization. this can be on a server level, based on IPs, and can also be done on script level.