<?php
-if (!$User) return;
+if ($Page->api) return;
if (!$User->login) {
- http_response_code(303);
$target = urlencode($_SERVER['REQUEST_URI']);
- header("Location: /login?goto=$target");
- exit;
+ abort("/login?goto=$target", 303);
}
elseif ($User->admin('user') and $username = @$_REQUEST['login']) {
try {