diff -r e4d660e58dfc -r 0cb70958b8fb core/stanza_router.lua
--- a/core/stanza_router.lua	Sat Jun 20 17:51:00 2009 +0500
+++ b/core/stanza_router.lua	Sat Jun 20 17:53:39 2009 +0500
@@ -54,6 +54,7 @@
 					and stanza.tags[1].attr.xmlns == "urn:ietf:params:xml:ns:xmpp-bind") then
 			-- authenticated client isn't bound and current stanza is not a bind request
 			origin.send(st.error_reply(stanza, "auth", "not-authorized")); -- FIXME maybe allow stanzas to account or server
+			return;
 		end
 
 		-- TODO also, stanzas should be returned to their original state before the function ends