diff --git a/inc/caldav-REPORT.php b/inc/caldav-REPORT.php
index d3cfdd23..d8a634b3 100644
--- a/inc/caldav-REPORT.php
+++ b/inc/caldav-REPORT.php
@@ -389,7 +389,7 @@ for ( $i=0; $i <= $reportnum; $i++ ) {
   }
 
   $where .= "AND (calendar_item.class != 'PRIVATE' OR calendar_item.class IS NULL OR get_permissions($session->user_no,caldav_data.user_no) ~ 'A') "; // Must have 'all' permissions to see confidential items
-  if($c->hide_TODO){
+  if ( isset($c->hide_TODO) && $c->hide_TODO ) {
     $where .= "AND (caldav_data.caldav_type NOT IN ('VTODO') OR get_permissions($session->user_no,caldav_data.user_no) ~ 'A') ";
   }
   $qry = new PgQuery( "SELECT * , get_permissions($session->user_no,caldav_data.user_no) as permissions FROM caldav_data INNER JOIN calendar_item USING(user_no, dav_name)". $where );