@@ -15,17 +15,20 @@ Nevertheless, in case you use a significant part of this code, we ask (but not r

 */

 require_once('inc/debug.php');

+if (! isset($_SESSION['admin_user'])) {

+  session_destroy();

+  redirect($prefix.'go/su/su');

+  die();

+}

-if (isset($_SESSION['admin_user']) ) {

-  $admin_user = $_SESSION['admin_user'];

-  $role = find_role($admin_user, '', True);

-  if ($role & ROLE_SYSADMIN) {

-    setup_session($role, $admin_user);

-    unset($_SESSION['admin_user']);

-    header('Location: '.$prefix.'go/su/su');

-    die();

-  }

+$admin_user = $_SESSION['admin_user'];

+$role = find_role($admin_user, '', True);

+if ($role & ROLE_SYSADMIN) {

+  setup_session($role, $admin_user);

+  unset($_SESSION['admin_user']);

+  header('Location: '.$prefix.'go/su/su');

+  die();

 }

-system_failure('Unprivilleged action');

+