Ignore request values that are not strings.

An array action or username no longer causes a PHP error.
2026-09-26 15:27:51 +02:00
parent be814a3ba5
commit 52f4855850
6 changed files with 27 additions and 4 deletions
@@ -64,7 +64,7 @@ Ordinary web users can:     write article

 $action = NULL;
 if (isset($_POST['action'])) {
-  $action = strtolower($_POST['action']);
+  $action = is_string($_POST['action']) ? strtolower($_POST['action']) : NULL;
 // We can trigger only choose and edit via GET variables.
 } else if (isset($_GET['action'])) {
  if ($_GET['action'] == 'choose') {