server.arg() returns a String by value, so the pointer from c_str() pointed into a temporary that was destroyed before strlen()/strcpy(). Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>