How to protect method post

Galera is the following I have a method post that the guy makes money for him, last night the guys hacked all the money from the site with the postman program, sending the points to him through the program post method, there is some way protect this data so nobody can do it? Or block the page so that only the server has access to it?