diff --git a/webapp/controller/BlockChainController.class.php b/webapp/controller/BlockChainController.class.php
index 2af044d5..b2813781 100644
--- a/webapp/controller/BlockChainController.class.php
+++ b/webapp/controller/BlockChainController.class.php
@@ -27,6 +27,18 @@ use models\BuyRecord;
 
 class BlockChainController extends BaseAuthedController {
 
+    public function _handlePre()
+    {
+        parent::_handlePre();
+        if (getReqVal('a') != 'getTransactionList') {
+            die(json_encode(array(
+                'errcode' => 501,
+                'errmsg' => 'you are not a wallet user'
+            )));
+            return;
+        }
+    }
+
     public function getTransactionList()
     {
         $trans = array();