secure AJAX update.php with init.php

[mudmin]

You're exactly right.

Code:

if($user->isLoggedIn()){ }

is the way to go. There are other ways to detect if the user variable is set or something like that, but isLoggedIn is the official and most reliable way to do it.