From 88e513f74fa96e1aa428f2453a58c79aaa9a5d9d Mon Sep 17 00:00:00 2001
From: sparkyx <danydb@noalyss.eu>
Date: Tue, 31 May 2022 12:55:27 +0200
Subject: [PATCH] Additional Tax : security

---
 include/acc_other_tax.inc.php   | 1 +
 include/ajax/ajax_other_tax.php | 5 ++++-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/include/acc_other_tax.inc.php b/include/acc_other_tax.inc.php
index 3e3a74e66..83adf9be2 100644
--- a/include/acc_other_tax.inc.php
+++ b/include/acc_other_tax.inc.php
@@ -20,6 +20,7 @@
  * @file
  * @brief manage the public.acc_other_tax
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 ?>
 <div class="content">
 <?php
diff --git a/include/ajax/ajax_other_tax.php b/include/ajax/ajax_other_tax.php
index 145f28829..141644f0e 100644
--- a/include/ajax/ajax_other_tax.php
+++ b/include/ajax/ajax_other_tax.php
@@ -18,7 +18,10 @@
  *  Copyright (2002-2022) Author Dany De Bontridder <danydb@noalyss.eu>
  */
 global $g_user;
-if  ( $g_user->check_module("OTAX") == 0) die();
+if (!defined('ALLOWED'))
+    die('Appel direct ne sont pas permis');
+
+if  ( $g_user->check_module("OTAX") == 0) die("");
 
 try {
     $table=$http->request('table');