diff --git a/html/includes/graphs/graph.inc.php b/html/includes/graphs/graph.inc.php
index 3d612f02d..170b091bd 100644
--- a/html/includes/graphs/graph.inc.php
+++ b/html/includes/graphs/graph.inc.php
@@ -39,6 +39,8 @@ $id       = mres($_GET['id']);
 if (!$config['allow_unauth_graphs'])
 {
   if (!$_SESSION['authenticated']) { graph_error("Session not authenticated"); exit; }
+} else {
+  $auth = TRUE; ## hardcode auth for all
 }
 
 preg_match('/^(?P<type>[A-Za-z0-9]+)_(?P<subtype>.+)/', mres($_GET['type']), $graphtype);