Some cleanups/improvements

[mailer.git] / inc / ajax / ajax_

diff --git a/inc/ajax/ajax_ b/inc/ajax/ajax_
index 84b5c7f2b7502d0d6a2e7e9c85013a00bdd41e09..de592ac950702c8615e148b4765ccc5eabd534b5 100644 (file)
--- a/inc/ajax/ajax_
+++ b/inc/ajax/ajax_
@@ -1,7 +1,7 @@
 <?php
 /************************************************************************
  * Mailer v0.2.1-FINAL                                Start: 06/24/2012 *
- * ===================                          Last change: 06/24/2012 *
+ * ===================                          Last change: 06/23/2013 *
  *                                                                      *
  * -------------------------------------------------------------------- *
  * File              : ajax_admin.php                                   *
@@ -16,7 +16,7 @@
  * $Author::                                                          $ *
  * -------------------------------------------------------------------- *
  * Copyright (c) 2003 - 2009 by Roland Haeder                           *
- * Copyright (c) 2009 - 2012 by Mailer Developer Team                   *
+ * Copyright (c) 2009 - 2013 by Mailer Developer Team                   *
  * For more information visit: http://mxchange.org                      *
  *                                                                      *
  * This program is free software; you can redistribute it and/or modify *
@@ -36,8 +36,11 @@
  ************************************************************************/
 
 // Some security stuff...
-if ((!defined('__SECURITY')) || (!isAjaxOutputMode())) {
+if (!defined('__SECURITY')) {
        die();
+} elseif ((!isAjaxOutputMode()) || (!isAdmin())) {
+       header('HTTP/1.1 403 Forbidden');
+       die(json_encode(array('reply_content' => 'Access forbidden'), JSON_FORCE_OBJECT));
 } // END - if
 
 // [EOF]