http://localhost/ticket/1416 <p> This might well be a bot, but not POSTing the email field should not cause an exception - it should be 400 and then the sysadmin doesn't get these nags. </p> <pre class="wiki">http://www.publicdata.eu/user/register ... Module ckan.controllers.user:79 in register &lt;&lt; c.login = request.params.getone('login') c.fullname = request.params.getone('fullname') c.email = request.params.getone('email') if not model.User.check_name_available(c.login): h.flash_error(_("That username is not available.")) &gt;&gt; c.email = request.params.getone('email') Module webob.multidict:335 in getone &lt;&lt; values were found. """ return self._decode_value(self.multi.getone(self._encode_key(key))) def mixed(self): &gt;&gt; return self._decode_value(self.multi.getone(self._encode_key(key))) Module webob.multidict:99 in getone &lt;&lt; v = self.getall(key) if not v: raise KeyError('Key not found: %r' % key) if len(v) &gt; 1: raise KeyError('Multiple values match %r: %r' % (key, v)) &gt;&gt; raise KeyError('Key not found: %r' % key) KeyError: "Key not found: 'email'" </pre><pre class="wiki">HTTP_USER_AGENT 'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; MRA 4.3 (build 01218); .NET CLR 1.1.4322)' webob._parsed_post_vars (MultiDict([('login', 'ahusernames9'), ('fullname', 'ahusernames9'), ('password1', '******'), ('password2', '******'), ('s', 'Sign up')]), &lt;FakeCGIBody at 0xb9d7c5ec viewing MultiDict([('lo...p')])&gt;) </pre> en-us http://assets.okfn.org/p/ckan/img/ckan_logo_shortname.png http://localhost/ticket/1416 Trac 0.12.3 rgrp Fri, 28 Oct 2011 09:36:35 GMT http://localhost/ticket/1416#comment:1 http://localhost/ticket/1416#comment:1 <ul> <li><strong>milestone</strong> changed from <em>ckan-current-sprint</em> to <em>ckan-sprint-2011-11-07</em> </li> </ul> <p> In normal user submission this would result in errors reported and no 500. Happy to have this switch to 400 if you think this is a good idea. </p> Ticket dread Tue, 01 Nov 2011 13:18:27 GMT http://localhost/ticket/1416#comment:2 http://localhost/ticket/1416#comment:2 <ul> <li><strong>status</strong> changed from <em>new</em> to <em>closed</em> </li> <li><strong>resolution</strong> set to <em>fixed</em> </li> </ul> <p> This seems to have been fixed in <a class="closed ticket" href="http://localhost/ticket/1229" title="enhancement: Refactor all database code out of the controllers and into the logic layer (closed: fixed)">#1229</a>. Added a test for this cset:5d6a3e50fe8f on default to demonstrate it displays a validation error, as rgrp suggests. </p> <p> Note, this ticket is about spammers missing some of the form fields, rather than any normal user usage, where the browser sends all the fields whether you fill them or not. </p> Ticket