Backport r5375 to release branch

1 files changed, 1 insertions, 1 deletions

diff --git a/index.php b/index.php
index de40cced1..e8c6cef24 100644
--- a/index.php
+++ b/index.php
@@ -195,7 +195,7 @@ else {
   // check client X-header to verify request origin
   if ($OUTPUT->ajax_call) {
     if (rc_request_header('X-Roundcube-Request') != $RCMAIL->get_request_token() && !$RCMAIL->config->get('devel_mode')) {
-      header('HTTP/1.1 404 Not Found');
+      header('HTTP/1.1 403 Forbidden');
       die("Invalid Request");
     }
   }