booklor.php - unauthorized access fixed