In the edit profile, if the User image (avatar) upload is enabled then email validation is not taking place.
Step
1) Login as admin and enable Upload picture in user setting
2) Login as normal user, now change the user email into an invalid one (Without the @ is enough)
3) Now if we try to save the form the email gets saved without any validation

CommentFileSizeAuthor
#2 user.pages.inc.patch429 bytesadaven

Comments

tejuspratap’s picture

Version: 6.4 » 6.6
adaven’s picture

Status: Active » Needs review
StatusFileSize
new429 bytes

I can confirm this bug. It's because the avatar adds its own validation step to $form['#validate'] so the default validator doesn't get called. I'm submitting a patch that fixes this. It's not pretty, it simply adds the default validator to $form['#validate'].

A more permanent solution would be to add user_validate_picture to _user_edit_validate, rather than have it as a separate validator.

gábor hojtsy’s picture

Status: Needs review » Fixed

This was solved in http://drupal.org/node/358957 (DRUPAL-SA-CORE-2009-001) and released in Drupal 6.9. Thanks for the report.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.