Do I need to use authentication check for public methods? <p>In object-oriented PHP application, do I need to use <code>authentication</code> check in almost every <code>public</code> method in my application for security?</p> <p>I'm worried about this vulnerability: <a href="http://cwe.mitre.org/top25/#CWE-306" rel="nofollow">CWE-306: Missing Authentication for Critical Function</a></p> <p><strong>How anyone could call my public methods, even if I use <code>static</code> keyword?</strong></p> <hr> <p>What are the requirements for this attack to succeed?</p> <p>Like some another vulnerability - Like allowing PHP file uploads to my system?</p>