From 43c067fc2d9eadd34d039929c530187fb80bd4c6 Mon Sep 17 00:00:00 2001
From: sparkyx <danydb@noalyss.eu>
Date: Fri, 27 Feb 2026 11:48:17 +0100
Subject: [PATCH] Security tigh

---
 include/class/noalyss_user.class.php | 3 +++
 include/modele.inc.php               | 1 +
 2 files changed, 4 insertions(+)

diff --git a/include/class/noalyss_user.class.php b/include/class/noalyss_user.class.php
index c0920209b..13a965dbf 100644
--- a/include/class/noalyss_user.class.php
+++ b/include/class/noalyss_user.class.php
@@ -1478,6 +1478,9 @@ class Noalyss_User
                         $p_module,
                         $_SERVER['REQUEST_URI'],
                         $action));
+            if ( $action=="FAIL") {
+                record_log("security alert see audit");
+            }
         }
     }
 
diff --git a/include/modele.inc.php b/include/modele.inc.php
index cf987e42d..6c7cb8639 100644
--- a/include/modele.inc.php
+++ b/include/modele.inc.php
@@ -27,6 +27,7 @@
  *
  */
 if ( !defined ('ALLOWED')) die('Forbidden');
+if ( ! defined ('ALLOWED_ADMIN')) { die (_('Non autorisé'));}
 \Noalyss\Dbg::echo_file(__FILE__);
 $http=new HttpInput();
 $sa = $http->request("sa", "string", 'list');