diff --git a/core/Controller/LoginController.php b/core/Controller/LoginController.php
index ffa5b10fc2..0f02be4bfd 100644
--- a/core/Controller/LoginController.php
+++ b/core/Controller/LoginController.php
@@ -142,6 +142,10 @@ class LoginController extends Controller {
 	 * @return TemplateResponse|RedirectResponse
 	 */
 	public function showLoginForm($user, $redirect_url) {
+		if (!is_string($user)) {
+			throw new \InvalidArgumentException('User needs to be string');
+		}
+
 		if ($this->userSession->isLoggedIn()) {
 			return new RedirectResponse(OC_Util::getDefaultPageUrl());
 		}