diff --git a/api_db.php b/api_db.php
index a10212a7..59d0aff0 100644
--- a/api_db.php
+++ b/api_db.php
@@ -384,7 +384,7 @@ if (isset($_GET['getGraphData']) && $auth)
 	$data = array_merge($data, $result);
 }
 
-if (isset($_GET['status']))
+if (isset($_GET['status']) && $auth)
 {
 	$extra = ";";
 	if(isset($_GET["ignore"]) && $_GET["ignore"] === 'DNSMASQ_WARN')