--- a/usrlogin.php	Wed Nov 27 03:16:36 2013 +0200
+++ b/usrlogin.php	Wed Nov 27 03:45:18 2013 +0200
@@ -34,21 +34,29 @@
   switch (stGetSetting("voteKeyMode"))
   {
     case VOTE_ACTIVATE:
+      if ($key["active"] == 0)
+        $error = 3;
       break;
 
     case VOTE_ASSIGN:
+      $sql = stPrepareSQL("SELECT id FROM attendees WHERE key_id=%d", $key["id"]);
+      if (stFetchSQL($sql) === false)
+        $error = 3;
       break;
   }
 
-  if (!stSessionStart(SESS_USER, $password, "userTimeout"))
+  if ($error == 0)
   {
-    error_log("User session AUTH LOGIN failed (session setup)");
-    $error = 2;
-  }
-  else
-  {
-    stSetSessionItem("key_id", $key["id"]);
-    stSetSessionItem("mode", stGetRequestItem("mode", "error"));
+    if (!stSessionStart(SESS_USER, $password, "userTimeout"))
+    {
+      error_log("User session AUTH LOGIN failed (session setup)");
+      $error = 2;
+    }
+    else
+    {
+      stSetSessionItem("key_id", $key["id"]);
+      stSetSessionItem("mode", stGetRequestItem("mode", "error"));
+    }
   }
 }
 else
@@ -62,4 +70,5 @@
 header("Location: ".
   ($nextPage !== FALSE ? $nextPage : stGetSetting("defaultPage")).
   ($error ? "?error=".$error : "");
+
 ?>
\ No newline at end of file