diff --git a/restorebackup.php b/restorebackup.php
index 174a9b2..69f6057 100644
--- a/restorebackup.php
+++ b/restorebackup.php
@@ -40,7 +40,7 @@ $context = context_system::instance();
 $mform = new service_backup_form($PAGE->url);
 
 /* Cancel processing */
-if ($mform->is_cancelled()) {
+if (($mform->is_cancelled()) && confirm_sesskey()) {
     redirect($managerservice);
 }