don't start sessions needlessly

1 files changed, 5 insertions, 0 deletions

diff --git a/index.php b/index.php
index 5260b1d..5743ea6 100644
--- a/index.php
+++ b/index.php
@@ -11,6 +11,11 @@
 		die("HTTP Authentication is no longer supported, please see migration notes in git.");
 	}
 
+	if (!isset($_COOKIE['epube_sid'])) {
+		header("Location: login.php");
+		exit;
+	}
+
 	require_once "config.php";
 	require_once "sessions.php";
 	require_once "db.php";