In the forms-worker we can see a problem about the data that come from Redis.
In the code, there aren't security if the data that come from the Redis is None.
So, in this special case, we try to use a property of None and there a bug.
First, I will proposed a fix for this problem. If the object is None, we write a error in the log. I don't think that we can do more..
Second, I will catch error from bad uuid. I think this error come with someone that modify the id of /confirm?id= url manually.
In the forms-worker we can see a problem about the data that come from Redis.
In the code, there aren't security if the data that come from the Redis is `None`.
So, in this special case, we try to use a property of `None` and there a bug.
First, I will proposed a fix for this problem. If the object is `None`, we write a error in the log. I don't think that we can do more..
Second, I will catch error from bad uuid. I think this error come with someone that modify the id of `/confirm?id=` url manually.
I had to revert #32. When signing up to the pmpc application for example, I received an internal server error. Funnily, the email has been sent correctly, and also the confirmation seems to work.
Ways to reproduce with the local docker env:
On publiccode.eu, replace https://forms.fsfe.org/email in the signup form with the IP and port of the locally running instance.
Fill in the form, submit, and see the error.
Check in the fake smtp that the email has been sent correctly.
I had to revert #32. When signing up to the pmpc application for example, I received an internal server error. Funnily, the email has been sent correctly, and also the confirmation seems to work.
Ways to reproduce with the local docker env:
1. On publiccode.eu, replace `https://forms.fsfe.org/email` in the signup form with the IP and port of the locally running instance.
2. Fill in the form, submit, and see the error.
3. Check in the fake smtp that the email has been sent correctly.
My bad! It's a really stupid error...
For more information https://bottlepy.org/docs/dev/tutorial.html#http-errors-and-redirects.
Sorry for the lost of time. I push a fix.
By chance I noticed that forms-worker crashed 5 days ago. forms-redis and forms-web continued to work but no confirmation mails have been sent out.
Logfile forms-worker: link
Log forms-web:
Hi Max,
What's the last commit push in production before this error ?
In the forms-worker we can see a problem about the data that come from Redis.
In the code, there aren't security if the data that come from the Redis is
None
.So, in this special case, we try to use a property of
None
and there a bug.First, I will proposed a fix for this problem. If the object is
None
, we write a error in the log. I don't think that we can do more..Second, I will catch error from bad uuid. I think this error come with someone that modify the id of
/confirm?id=
url manually.Okay, sounds good, thanks!
Closed with #32
I had to revert #32. When signing up to the pmpc application for example, I received an internal server error. Funnily, the email has been sent correctly, and also the confirmation seems to work.
Ways to reproduce with the local docker env:
https://forms.fsfe.org/email
in the signup form with the IP and port of the locally running instance.My bad! It's a really stupid error...
For more information https://bottlepy.org/docs/dev/tutorial.html#http-errors-and-redirects.
Sorry for the lost of time. I push a fix.
@max.mehl, the fix was pushed on #34 :)
Thanks, #34 did the trick! :)