<?php
require_once __DIR__ . '/config.php';

ini_set('session.cookie_httponly', '1');
ini_set('session.cookie_samesite', 'Lax');
session_start();

if (!isset($_SESSION['qw_auth'])) {
    http_response_code(401);
    header('Content-Type: application/json');
    die(json_encode(['status' => 'error', 'message' => 'No autenticado']));
}