Redirect back to the edit screen to display the updates and message

[carlo.tafuro]

Hello,

after the line:

bp_core_add_message( __( 'Please make sure you fill in all required fields in this profile field group before saving.', 'buddypress' ), 'error' );

in bp-xprofile/bp-xprofile-screens.php

(see ​https://buddypress.trac.wordpress.org/browser/branches/2.9/src/bp-xprofile/bp-xprofile-screens.php#L100 )

is missing:

// Redirect back to the edit screen to display the updates and message.
bp_core_redirect( trailingslashit( bp_displayed_user_domain() . bp_get_profile_slug() . '/edit/group/' . bp_action_variable( 1 ) ) );

like at the end of the same function xprofile_screen_edit_profile()

(see ​https://buddypress.trac.wordpress.org/browser/branches/2.9/src/bp-xprofile/bp-xprofile-screens.php#L171 )

without that line the error message is displayed on the next page.

Thanks
Carlo

[DJPaul]

Hi @carlo.tafuro

This is an excellent bug report, thank you for letting us know.

[DJPaul]

To reproduce, you need to authenticate as a non-admin user and have two profile fields: one optional, one required. I used textboxes.

Submit the edit form with values for both fields. When the page reloads on the edit screen showing the success message, change the value for the optional field to something you'll remember, and clear the value entirely from the required field.

What should happen is that you are presented with a message saying "check all required fields are filled in", and the values of both fields show their original, pre-saved values.

What actually happens is, you are presented with that message, but both profile field values have been updated as per the values you entered into the form: the "required" field has no value set(!).

The fix is as Carlo has described.

[carlo.tafuro]

Hi @DJPaul,
the required field seems to have no value set, but if you reload the page you see that the value remains unchanged, so there is no problem of bypassing required form fields.

[DJPaul]

Hi again @carlo.tafuro!

Exactly - it took me an hour, but I remembered it works like that because it would annoy people if they wrote in lots of profile fields, but forgot one required field, and then lost all their changes. :) What I'm going to do is change the error message currently shown to make this more obvious, and look into changing required form fields to have the HTML "required" attribute which would avoid this all together.

[djpaul]

In 11816:

xprofile: adjust message shown to user when submitting xprofile edit form while required fields are empty.

Intended to clarify that the displayed changes are temporary and not saved yet.
We do this because it prevents loss of user data if a lot of changes are made, but a required field has been missed.

Fixes #7664

Thanks to carlo.tafuro for reporting the issue.