api host: add session validation

4afcf635 · Andrew Dolgov · 5d97019d · 4afcf635
Commit 4afcf635 authored Jul 20, 2016 by Andrew Dolgov
Hide whitespace changes
Inline Side-by-side

Showing with 10 additions and 0 deletions

api/index.php api/index.php +10 -0

No files found.
--- a/api/index.php
+++ b/api/index.php
@@ -58,6 +58,16 @@
 	if (!init_plugins()) return;

 	if ($_SESSION["uid"]) {
+		if (!validate_session()) {
+			header("Content-Type: text/json");
+
+			print json_encode(array("seq" => -1,
+				"status" => 1,
+				"content" => array("error" => "NOT_LOGGED_IN")));
+
+			return;
+		}
+
 		load_user_plugins( $_SESSION["uid"]);
 	}