For security reasons, there should be some sort of authentication for the API users. Study and implement one.