X-Git-Url: https://git.sur5r.net/?a=blobdiff_plain;f=ajax.php;h=580e262ed413b2214b67e70283805f7eb156150b;hb=f204d4d8fe772001803c3509f8be0528840be4eb;hp=eeacb17243ad5a809a837a48f4d209efcde7ef2f;hpb=373aba15e4a5e4f89a3726f0c49c74127af37313;p=contagged

diff --git a/ajax.php b/ajax.php
index eeacb17..580e262 100644
--- a/ajax.php
+++ b/ajax.php
@@ -1,7 +1,14 @@
-<?
+<?php
 require_once('inc/init.php');
 ldap_login();
 
+if ($conf['userlogreq'] && !isset($_SESSION['ldapab']['username'])){
+  header("HTTP/1.1 401 Access Denied");
+  echo '<h1>Access Denied</h1>';
+  exit();
+}
+
+
 $FIELD = preg_replace('/entry\[/','',$_REQUEST['field']);
 $FIELD = preg_replace('/\W+/','',$FIELD);