diff --git a/webapp/controller/BaseAuthedController.class.php b/webapp/controller/BaseAuthedController.class.php
index 62f1bf0e..526a27d0 100644
--- a/webapp/controller/BaseAuthedController.class.php
+++ b/webapp/controller/BaseAuthedController.class.php
@@ -96,6 +96,11 @@ class BaseAuthedController extends BaseController {
             die();
         }
         }
+        if (!(myself()->_getChannel() == IMTBL_CHANNEL ||
+              myself()->_getChannel() == GUEST_CHANNEL)) {
+            phpcommon\sendError(1001, 'session expiration');
+            die();
+        }
         $r = $this->_getRedis($this->_getAccountId());
         if (!(getReqVal('c', '') == 'User' && getReqVal('a', '') == 'login')) {
             if ((getReqVal('c', '') == 'Battle')) {