Security issue #169491 by Ayesh, Liam Morland: Remove arrays of 'sid' from $_POST in _webform_fetch_draft_sid()