Ignore request values that are not strings.
An array action or username no longer causes a PHP error.
This commit is contained in:
+1
-1
@@ -58,7 +58,7 @@ Ordinary web users can: write article
|
||||
*/
|
||||
|
||||
if (isset($_POST['action']))
|
||||
$action = strtolower($_POST['action']);
|
||||
$action = is_string($_POST['action']) ? strtolower($_POST['action']) : NULL;
|
||||
else
|
||||
$action = NULL;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user