From 09f71fa9ac5c243c605b2114bdbd48d6e542bdaa Mon Sep 17 00:00:00 2001
From: Alan <alan@roojs.com>
Date: Wed, 15 Mar 2023 14:49:08 +0800
Subject: [PATCH] protect columns

---
 Pman/Roo.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Pman/Roo.php b/Pman/Roo.php
index 344bbb0..5334bbb 100644
--- a/Pman/Roo.php
+++ b/Pman/Roo.php
@@ -199,7 +199,7 @@ class Pman_Roo extends Pman
         $tab = array_shift($tt);
         $x = $this->dataObject($tab);
         
-        $_columns = !empty($_REQUEST['_columns']) ? explode(',', $_REQUEST['_columns']) : false;
+        $_columns = !empty($_REQUEST['_columns']) && is_string(['_columns']) ? explode(',', $_REQUEST['_columns']) : false;
         
         if (isset( $_REQUEST['lookup'] ) && is_array($_REQUEST['lookup'] )) { // single fetch based on key/value pairs
              $this->selectSingle($x, $_REQUEST['lookup'],$_REQUEST);
-- 
2.39.2