activate kickuser when no authorized user is behind proxy

diff --git a/web/Obj/curl-de-brisk.phh b/web/Obj/curl-de-brisk.phh
index c92b0a0d0c92d13aae88adf75bbc5c92a052fea5..47244fb2aa564a4c47ab6d80338a45880ae053fa 100755 (executable)
--- a/web/Obj/curl-de-brisk.phh
+++ b/web/Obj/curl-de-brisk.phh
@@ -276,7 +276,7 @@ function proxy_chk_postprocess($brisk, $user_idx, $user_sess, $conn_ip, $is_auth
 {
     log_cds(sprintf("proxy: user_idx: %d, user_sess: %s, conn_ip: %s, is_auth: %s, is_proxy: %s",
                     $user_idx, $user_sess, $conn_ip, ($is_auth ? "YES" : "NO"), ($is_proxy ? "YES" : "NO")));
-    if (FALSE && $is_proxy) {
+    if (!$brisk->user[$user_idx]->is_auth() && $is_proxy) {
         $brisk->kickuser_by_sess($user_sess, 5); // GHOST_SESS_REAS_ANON
     }
     $brisk->user[$user_idx]->pend_async--;