diff --git a/interface/web/remote/rest.php b/interface/web/remote/rest.php
index d57915004520e9895d4fafe1b463a3ffc47b1d21..4f202c6eeedff5c2f51d57dfc6ee9149be738215 100644
--- a/interface/web/remote/rest.php
+++ b/interface/web/remote/rest.php
@@ -6,7 +6,11 @@ require_once '../../lib/config.inc.php';
 $conf['start_session'] = false;
 require_once '../../lib/app.inc.php';
 
-$app->load('rest_handler');
+$app->load('rest_handler,getconf');
+
+$security_config = $app->getconf->get_security_config('permissions');
+if($security_config['remote_api_allowed'] != 'yes') die('Remote API is disabled in security settings.');
+
 $rest_handler = new ISPConfigRESTHandler();
 $rest_handler->run();