	function handleFormSubmission(&$request, &$output, &$session) {
		if ($request->getText('action')) {
			handleRequestActionSubmission('admin', $this, $session);
		} else if ($request->getText('blockSubmit')) {
			$this->handleBlockFormSubmission($request, $output, $session);
		} else if ($request->getText('unblockSubmit')) {
			$this->handleUnblockFormSubmission($request, $output, $session);
		} else if ($request->getText('bypassAddUsername') || $request->getText('bypassRemoveUsername')) { //TODO: refactor to move all the subpages into their own files
			$bypassPage = new RequirementsBypassPage($this);
			$bypassPage->handleFormSubmission();
		}
	}
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.