Kill sockets without a valid session

1 files changed, 3 insertions, 0 deletions

diff --git a/index.js b/index.js
index 0276a68..65d8d93 100644
--- a/index.js
+++ b/index.js
@@ -50,6 +50,9 @@ var channels = {};
 var logServerAction = entityLogger(0);
 
 sessionSockets.on('connection', function (err, socket, session) {
+  if (!session) {
+    socket.disconnect();
+  }
   /*
    * Don't do anything until they send a login message.
    * Later versions might also check a protocol version here.