diff --git a/backend.php b/backend.php
index 9eb3989e4..6ee0e081f 100644
--- a/backend.php
+++ b/backend.php
@@ -62,6 +62,11 @@
 	}
 
 	if ($_SESSION["uid"]) {
+		if (!validate_session($link)) {
+			header("Content-Type: text/json");
+			print json_encode(array("error" => array("code" => 6)));
+			return;
+		}
 		load_user_plugins($link, $_SESSION["uid"]);
 	}