Event attendance confirmation crashes with malformed input

[nickswalker]

I was poking around with the event attendance confirmation system and was able to trigger a 500 error by passing in invalid arguments, or leaving one off. No one should ever run into this, so it's not a big deal.

Internal Server Error: /events/confirm/

ValueError at /events/confirm/ invalid literal for int() with base 10: ‘confirm’

Request Method: GET Request URL: https://www.txcsmad.com/events/confirm/ Django Version: 1.10 Python Executable: /usr/bin/python3 Python Version: 3.5.2 Python Path: ['/var/www/MAD-Web', ‘/usr/local/bin’, ‘/usr/lib/python35.zip’, ‘/usr/lib/python3.5’, ‘/usr/lib/python3.5/plat-x86_64-linux-gnu’, ‘/usr/lib/python3.5/lib-dynload’, ‘/usr/local/lib/python3.5/dist-packages’, ‘/usr/lib/python3/dist-packages’] Server time: Fri, 6 Jan 2017 22:44:39 -0600 Installed Applications: ('django.contrib.auth',

Traceback:

File “/usr/local/lib/python3.5/dist-packages/django/core/handlers/exception.py” in inner

39.             response = get_response(request)
File “/usr/local/lib/python3.5/dist-packages/django/core/handlers/base.py” in _legacy_get_response

249.             response = self._get_response(request)
File “/usr/local/lib/python3.5/dist-packages/django/core/handlers/base.py” in _get_response

187.                 response = self.process_exception_by_middleware(e, request)
File “/usr/local/lib/python3.5/dist-packages/django/core/handlers/base.py” in _get_response

185.                 response = wrapped_callback(request, *callback_args, **callback_kwargs)
File “/usr/lib/python3.5/contextlib.py” in inner

30.                 return func(*args, **kwds)
File “/usr/local/lib/python3.5/dist-packages/django/views/generic/base.py” in view

68.             return self.dispatch(request, *args, **kwargs)
File “/usr/local/lib/python3.5/dist-packages/django/views/generic/base.py” in dispatch

88.         return handler(request, *args, **kwargs)
File “/usr/local/lib/python3.5/dist-packages/django/views/generic/detail.py” in get

115.         self.object = self.get_object()
File “/usr/local/lib/python3.5/dist-packages/django/views/generic/detail.py” in get_object

43.             queryset = queryset.filter(**{slug_field: slug})
File “/usr/local/lib/python3.5/dist-packages/django/db/models/query.py” in filter

794.         return self._filter_or_exclude(False, *args, **kwargs)
File “/usr/local/lib/python3.5/dist-packages/django/db/models/query.py” in _filter_or_exclude

812.             clone.query.add_q(Q(*args, **kwargs))
File “/usr/local/lib/python3.5/dist-packages/django/db/models/sql/query.py” in add_q

1227.         clause, _ = self._add_q(q_object, self.used_aliases)
File “/usr/local/lib/python3.5/dist-packages/django/db/models/sql/query.py” in _add_q

1253.                     allow_joins=allow_joins, split_subq=split_subq,
File “/usr/local/lib/python3.5/dist-packages/django/db/models/sql/query.py” in build_filter

1187.             condition = self.build_lookup(lookups, col, value)
File “/usr/local/lib/python3.5/dist-packages/django/db/models/sql/query.py” in build_lookup

1083.                 return final_lookup(lhs, rhs)
File “/usr/local/lib/python3.5/dist-packages/django/db/models/lookups.py” in _init_

19.         self.rhs = self.get_prep_lookup()
File “/usr/local/lib/python3.5/dist-packages/django/db/models/lookups.py” in get_prep_lookup

59.             return self.lhs.output_field.get_prep_value(self.rhs)
File “/usr/local/lib/python3.5/dist-packages/django/db/models/fields/__init__.py” in get_prep_value

946.         return int(value)
Exception Type: ValueError at /events/confirm/ Exception Value: invalid literal for int() with base 10: ‘confirm’ Request information: USER: nickswalker

GET: No GET data

POST: No POST data

FILES: No FILES data