diff --git a/ajax/auto/connectmysql.php b/ajax/auto/connectmysql.php
index 6b19ad1..52ee5f5 100644
--- a/ajax/auto/connectmysql.php
+++ b/ajax/auto/connectmysql.php
@@ -2,6 +2,12 @@
 require_once("../../incs/constants.php");
 session_name(SESSION_NAME);
 session_start(); 
+// Alle AJAX-Endpunkte laden diese Datei: ohne Anmeldung gibt es keine Daten.
+if(($_SESSION["login"] ?? "") !== "valid")
+{
+	http_response_code(403);
+	exit("Nicht angemeldet.");
+}
 require_once("../../incs/settings.php");
 $settings=readsettings();
 if($settings == "valid")
diff --git a/clean_db.php b/clean_db.php
index dc1bafe..f6119b8 100644
--- a/clean_db.php
+++ b/clean_db.php
@@ -1,4 +1,7 @@
 <?php 
+// Wartungsskript: nur per Kommandozeile, nie über den Webserver
+if(PHP_SAPI != "cli")
+	exit;
 require_once("./incs/constants.php");
 session_name(SESSION_NAME);
 session_start(); 
diff --git a/db-backup.php b/db-backup.php
index 3d168b6..6bba35f 100644
--- a/db-backup.php
+++ b/db-backup.php
@@ -1,4 +1,7 @@
 <?php
+// Nur per Kommandozeile (Cronjob), nie über den Webserver
+if(PHP_SAPI != "cli")
+	exit;
 /*
  * Datenbank-Backup (Cronjob).
  *
diff --git a/incs/connectmysql.php b/incs/connectmysql.php
index 17b6729..84a2a4e 100644
--- a/incs/connectmysql.php
+++ b/incs/connectmysql.php
@@ -2,6 +2,12 @@
 require_once("../incs/constants.php");
 session_name(SESSION_NAME);
 session_start(); 
+// Alle AJAX-Endpunkte laden diese Datei: ohne Anmeldung gibt es keine Daten.
+if(($_SESSION["login"] ?? "") !== "valid")
+{
+	http_response_code(403);
+	exit("Nicht angemeldet.");
+}
 require_once("../incs/settings.php");
 $settings=readsettings();
 if($settings == "valid")
diff --git a/stats.php b/stats.php
index 6a0a632..b90fa6a 100644
--- a/stats.php
+++ b/stats.php
@@ -1,4 +1,12 @@
 <?php 
+require_once("incs/constants.php");
+session_name(SESSION_NAME);
+session_start();
+if((($_SESSION["login"] ?? "") !== "valid"))
+{
+	http_response_code(403);
+	exit("Nicht angemeldet.");
+}
 
 	error_reporting(E_ERROR | E_WARNING | E_PARSE);
 	// Standard inclusions