diff --git a/course/report/stats/mod.php b/course/report/stats/mod.php
index 264e756f39a..7680376a63e 100644
--- a/course/report/stats/mod.php
+++ b/course/report/stats/mod.php
@@ -1,5 +1,9 @@
 <?php
 
+    if (!defined('MOODLE_INTERNAL')) {
+        die('Direct access to this script is forbidden.');    ///  It must be included from a Moodle page
+    }
+
     if (!empty($CFG->enablestats)) {
         echo '<a href="'.$CFG->wwwroot.'/course/report/stats/index.php?course='.$course->id.'">'.get_string('stats').'</a>';
     }