1 files changed, 3 insertions, 1 deletions

diff --git a/src/post-ajax.php b/src/post-ajax.php
index df5a01a..bedfed5 100644
--- a/src/post-ajax.php
+++ b/src/post-ajax.php
@@ -1,5 +1,7 @@
 <?php
-if($_SERVER['REQUEST_METHOD'] === 'POST'){ // && $_SESSION['admin'] === true
+session_start();
+
+if(isset($_SESSION['admin']) && $_SESSION['admin'] === true && $_SERVER['REQUEST_METHOD'] === 'POST'){ // && $_SESSION['admin'] === true
         if($_SERVER['CONTENT_TYPE'] === 'application/json'){
                 $data = file_get_contents('php://input');
                 $json = json_decode($data, true);