Some cleanups/improvements

[mailer.git] / inc / ajax / ajax_

diff --git a/inc/ajax/ajax_ b/inc/ajax/ajax_
index 20099b8c059f98c531f5a3fc8938d4617094fd15..de592ac950702c8615e148b4765ccc5eabd534b5 100644 (file)
--- a/inc/ajax/ajax_
+++ b/inc/ajax/ajax_
@@ -1,7 +1,7 @@
 <?php
 /************************************************************************
  * Mailer v0.2.1-FINAL                                Start: 06/24/2012 *
- * ===================                          Last change: 06/24/2012 *
+ * ===================                          Last change: 06/23/2013 *
  *                                                                      *
  * -------------------------------------------------------------------- *
  * File              : ajax_admin.php                                   *
@@ -36,7 +36,9 @@
  ************************************************************************/
 
 // Some security stuff...
-if ((!defined('__SECURITY')) || (!isAjaxOutputMode())) {
+if (!defined('__SECURITY')) {
+       die();
+} elseif ((!isAjaxOutputMode()) || (!isAdmin())) {
        header('HTTP/1.1 403 Forbidden');
        die(json_encode(array('reply_content' => 'Access forbidden'), JSON_FORCE_OBJECT));
 } // END - if