From 65ff78f61a49b3b1d2086a678ac6caa21fe363d0 Mon Sep 17 00:00:00 2001
From: jfefe <jfefe@aternatik.fr>
Date: Sat, 2 May 2015 15:31:21 +0200
Subject: [PATCH] Don't expose API if module disabled

---
 htdocs/public/api/index.php | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/htdocs/public/api/index.php b/htdocs/public/api/index.php
index 7f291bfa36e..7d620dbcad7 100644
--- a/htdocs/public/api/index.php
+++ b/htdocs/public/api/index.php
@@ -36,6 +36,16 @@ require_once DOL_DOCUMENT_ROOT.'/includes/restler/vendor/autoload.php';
 require_once DOL_DOCUMENT_ROOT.'/api/class/api.class.php';
 require_once DOL_DOCUMENT_ROOT.'/core/lib/functions2.lib.php';
 
+// Enable and test if module Api is enabled
+if (empty($conf->global->MAIN_MODULE_API))
+{
+    $langs->load("admin");
+    dol_syslog("Call Dolibarr API interfaces with module disabled");
+    print $langs->trans("WarningModuleNotActive",'Api').'.<br><br>';
+    print $langs->trans("ToActivateModule");
+    exit;
+}
+
 $api = new DolibarrApi($db);
 
 $api->r->setSupportedFormats('JsonFormat', 'XmlFormat');