Fix Message: strtoupper(): Passing null in Security.php

nguyenanhung · Sep 21, 2024 · 642fa77 · 642fa77
1 parent 84e2da6
commit 642fa77
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/system/core/Security.php b/system/core/Security.php
@@ -220,8 +220,14 @@ public function __construct()
 	 */
 	public function csrf_verify()
 	{
+		if (isset($_SERVER['REQUEST_METHOD']) && $_SERVER['REQUEST_METHOD'] == ''){
+			$requestMethod = strtoupper((string) $_SERVER['REQUEST_METHOD']);
+		} else {
+			$requestMethod = '';
+		}
+
 		// If it's not a POST request we will set the CSRF cookie
-		if (strtoupper($_SERVER['REQUEST_METHOD']) !== 'POST') {
+		if ($requestMethod !== 'POST') {
 			return $this->csrf_set_cookie();
 		}