When updating an remote catalog it will try to grab the images from the remote machine to the local database.

1 files changed, 5 insertions, 1 deletions

diff --git a/image.php b/image.php
index 077133b8..53ff786d 100644
--- a/image.php
+++ b/image.php
@@ -31,7 +31,11 @@ define('NO_SESSION','1');
 require 'lib/init.php';
 
 // Check to see if they've got an interface session or a valid API session, if not GTFO
-if (!vauth::session_exists('interface',$_COOKIE[Config::get('session_name')]) AND !vauth::session_exists('api',$_REQUEST['auth'])) { 
+if (    !vauth::session_exists('interface',$_COOKIE[Config::get('session_name')]) 
+	AND !vauth::session_exists('api',$_REQUEST['auth'])
+	AND !vauth::session_exists('xml-rpc',$_REQUEST['auth'])
+	) 
+{ 
 	debug_event('DENIED','Image Access, Checked Cookie Session and Auth:' . $_REQUEST['auth'],'1');
 	exit; 
 }