diff --git a/utils/changepass.php b/utils/changepass.php
index 76acfc2..fc17440 100644
--- a/utils/changepass.php
+++ b/utils/changepass.php
@@ -38,6 +38,8 @@
     if (!$passUser->isValid) {
       uUtils::exitWithError("User unknown");
     }
+  } else if (!empty($login)) {
+    uUtils::exitWithError("Unauthorized");
   } else {
     // current user
     $passUser = $auth->user;