diff --git a/include/ajax/ajax_forecast.php b/include/ajax/ajax_forecast.php
index fc6f20418..e048f3ebf 100644
--- a/include/ajax/ajax_forecast.php
+++ b/include/ajax/ajax_forecast.php
@@ -19,8 +19,12 @@
 
 // Copyright Author Dany De Bontridder danydb@noalyss.eu
 
+if (!defined('ALLOWED')) die('Appel direct ne sont pas permis');
+
 require_once NOALYSS_INCLUDE . "/database/forecast_sql.class.php";
 
+if ($g_user->check_module("FORECAST")==0) die();
+
 $http = new HttpInput();
 $input = $http->request("input");
 $action = $http->request("ieaction", "string", "display");