diff --git a/Templates/Ajax/quest_core25.tpl b/Templates/Ajax/quest_core25.tpl
index ac83f032..4beaeee6 100644
--- a/Templates/Ajax/quest_core25.tpl
+++ b/Templates/Ajax/quest_core25.tpl
@@ -47,6 +47,7 @@ if (isset($qact)){
 	if ($check_quest==$qact) {
 		//avoid hacking gold, resources or reward -- added by Ronix
 	}else {
+		if ($qact > $_SESSION['qst'] || !is_numeric($qact)){
 		switch($qact) {
 		case 'enter':
 			$database->updateUserField($_SESSION['username'],'quest','1',0);
@@ -400,7 +401,7 @@ if (isset($qact)){
 			$gold+=20;
 			$database->updateUserField($_SESSION['username'],'gold',$gold,0);
 			break;
-		}	
+		}}	
 	}
 }