model.ajax.php is only called by admins so we add the api_protect_admin_script

15 years ago · a9bc149432
parent 394ce7dc01
commit a9bc149432
1 changed files with 3 additions and 3 deletions
--- a/main/inc/ajax/model.ajax.php
+++ b/main/inc/ajax/model.ajax.php
@ -3,9 +3,9 @@

 //@todo this could be integrated in the inc/lib/model.lib.php + try to clean this file, is not very well tested yet!
 require_once '../global.inc.php';
-if (api_is_anonymous()) {
-    exit;
-}
+
+api_protect_admin_script(true);
+
 $libpath = api_get_path(LIBRARY_PATH);
 require_once $libpath.'array.lib.php';