There is a way to control this without IP restriction. Make the return
URL for the API to post to stored within your account and not in the
script and attach a get code to the end like ?key=sey4hd56dh4567h568 and
have your script detect if $_GET['key...