From a9bc149432ff7c98f838bfa4ecb109019fef5c4e Mon Sep 17 00:00:00 2001
From: Julio Montoya <gugli100@gmail.com>
Date: Tue, 26 Apr 2011 15:55:48 +0200
Subject: [PATCH] model.ajax.php is only called by admins so we add the
 api_protect_admin_script

---
 main/inc/ajax/model.ajax.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/main/inc/ajax/model.ajax.php b/main/inc/ajax/model.ajax.php
index 22795c9a88..26a65b5521 100644
--- a/main/inc/ajax/model.ajax.php
+++ b/main/inc/ajax/model.ajax.php
@@ -3,9 +3,9 @@
 
 //@todo this could be integrated in the inc/lib/model.lib.php + try to clean this file, is not very well tested yet!
 require_once '../global.inc.php';
-if (api_is_anonymous()) {
-    exit;
-}
+
+api_protect_admin_script(true);
+
 $libpath = api_get_path(LIBRARY_PATH);
 require_once $libpath.'array.lib.php';