Fixed CSRF problem, and plain check of arrays.