diff --git a/lib/session/Session.inc b/lib/session/Session.inc
index f3fb3a3..2850603 100644
--- a/lib/session/Session.inc
+++ b/lib/session/Session.inc
@@ -211,6 +211,12 @@ class Session {
         if ($ipTracking && ($ip != trim($aRow["ip"]))) {
             return PEAR::raiseError(_kt("You are coming from a different IP address than the session requires"));
         }
+        
+        if (empty($_SESSION['userID'])) {
+            Session::removeStaleSessions();
+
+            return PEAR::raiseError(_kt('Session timed out'));
+        }
 
         // now check if the timeout has been exceeded
         $lastused = $aRow["lastused"];