Original posted to roundup-devel

If I am logged out of the roundup tracker and go to:

http://issues.roundup-tracker.org/issue?%40search_text=&title=&%40columns=title&id=&%40columns=id&creation=&creator=&activity=&%40columns=activity&%40sort=activity&actor=&nosy=&type=&components=&versions=&dependencies=&assignee=&keywords=1&priority=&%40group=priority&status=1&%40columns=status&resolution=&%40pagesize=50&%40startwith=0&%40action=search

(This url is the result of a search for issues with the patch
keyword.)

When I then try to login with that URL displayed in my browser I get:

    "broken form: multiple @action values submitted"

Can anybody reproduce this? If so I'll ticket it. I am using palemoon
12.3 (firefox derivative) on windows xp sp3.

If I chose the "open tickets" search link and try to log in I am
logged in just fine. 

This was confirmed so I am finally opening  ticket.

Further work/discussion at:
http://psf.upfronthosting.co.za/roundup/meta/issue448

The problem is that the login is a POST and includes an @action
variable. However the search result is a get style (so it can be
easily bookmarked) and the @action in the url is incorporated
in the url that the login post is sent to (as the action of the
form is the url "#").

So one possibility is to use as the login action the base url without
including any search term (after the ?).

In the 1.4.19 template it looks like this action is created by:

    tal:attributes="action request/base"

I would expect request/base would return the url before the ?
so it looks like this may be a bug in request/base.

Other thoughts welcome.