In the edit profile, if the User image (avatar) upload is enabled then email validation is not taking place.
Step
1) Login as admin and enable Upload picture in user setting
2) Login as normal user, now change the user email into an invalid one (Without the @ is enough)
3) Now if we try to save the form the email gets saved without any validation
| Comment | File | Size | Author |
|---|---|---|---|
| #2 | user.pages.inc.patch | 429 bytes | adaven |
Comments
Comment #1
tejuspratap commentedComment #2
adaven commentedI can confirm this bug. It's because the avatar adds its own validation step to $form['#validate'] so the default validator doesn't get called. I'm submitting a patch that fixes this. It's not pretty, it simply adds the default validator to $form['#validate'].
A more permanent solution would be to add user_validate_picture to _user_edit_validate, rather than have it as a separate validator.
Comment #3
gábor hojtsyThis was solved in http://drupal.org/node/358957 (DRUPAL-SA-CORE-2009-001) and released in Drupal 6.9. Thanks for the report.