Profile fields are validated when the user fills out the attendee contact info form, but the checkout pane only redirects back to the attendees form if the email addresses don't match the quantity in the cart. This allows users to create accounts with blank required profile fields simply by bypassing the profile fields form and proceeding to /cart.

CommentFileSizeAuthor
#1 547242.patch2.45 KBezra-g

Comments

ezra-g’s picture

ezra-g commented
Status: Active » Needs review
StatusFileSize
new 547242.patch2.45 KB

This patch switches from user_save to a drupal_execute approach and causes order submission to fail and deletes temporary signups for an order when form validation fails.

ezra-g’s picture

ezra-g commented
Status: Needs review » Fixed

This is now committed.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.