/en/admin/auth/user/year -1 处的 Django ValueError 超出范围

Question

我有生产django服务器，其中一个ID为399的用户每次包含在搜索结果中时都会导致此错误，我使用的用户模型是默认的django用户模型。

Django Version: 4.0.10
Exception Type: ValueError
Exception Value: year -1 is out of range
Exception Location: ../.venv/lib64/python3.9/site-packages/django/db/utils.py, line 98, in inner
Python Executable: ../.venv/bin/python3.9
Python Version: 3.9.18
database : Postgresql 10.23

即使当我进入 django 管理页面并尝试删除用户时也会出现相同的错误，但可以删除任何其他用户。

Traceback (most recent call last):
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/core/handlers/exception.py", line 43, in inner
    response = await get_response(request)
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/core/handlers/base.py", line 253, in _get_response_async
    response = await wrapped_callback(
  File "/usr/lib64/python3.9/concurrent/futures/thread.py", line 58, in run
    result = self.fn(*self.args, **self.kwargs)
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/contrib/admin/options.py", line 683, in wrapper
    return self.admin_site.admin_view(view)(*args, **kwargs)
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/utils/decorators.py", line 134, in _wrapped_view
    response = view_func(request, *args, **kwargs)
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/views/decorators/cache.py", line 62, in _wrapped_view_func
    response = view_func(request, *args, **kwargs)
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/contrib/admin/sites.py", line 242, in inner
    return view(request, *args, **kwargs)
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/utils/decorators.py", line 46, in _wrapper
    return bound_method(*args, **kwargs)
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/utils/decorators.py", line 134, in _wrapped_view
    response = view_func(request, *args, **kwargs)
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/contrib/admin/options.py", line 1960, in changelist_view
    response = self.response_action(
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/contrib/admin/options.py", line 1589, in response_action
    response = func(self, request, queryset)
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/contrib/admin/actions.py", line 39, in delete_selected
    ) = modeladmin.get_deleted_objects(queryset, request)
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/contrib/admin/options.py", line 2100, in get_deleted_objects
    return get_deleted_objects(objs, request, self.admin_site)
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/contrib/admin/utils.py", line 120, in get_deleted_objects
    collector.collect(objs)
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/contrib/admin/utils.py", line 186, in collect
    return super().collect(objs, source_attr=source_attr, **kwargs)
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/db/models/deletion.py", line 341, in collect
    if sub_objs:
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/db/models/query.py", line 324, in __bool__
    self._fetch_all()
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/db/models/query.py", line 1507, in _fetch_all
    self._result_cache = list(self._iterable_class(self))
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/db/models/query.py", line 57, in __iter__
    results = compiler.execute_sql(
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/db/models/sql/compiler.py", line 1394, in execute_sql
    return list(result)
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/db/models/sql/compiler.py", line 1873, in cursor_iter
    for rows in iter((lambda: cursor.fetchmany(itersize)), sentinel):
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/db/models/sql/compiler.py", line 1873, in <lambda>
    for rows in iter((lambda: cursor.fetchmany(itersize)), sentinel):
  File "/home/project/staff/.venv/lib64/python3.9/site-packages/django/db/utils.py", line 98, in inner
    return func(*args, **kwargs)

Exception Type: ValueError at /en/admin/auth/user/
Exception Value: year -1 is out of range

Answer 1

您收到的错误可能与

DateTimeField

字段具有无效值有关（请参阅：Django 论坛上的如何避免“ValueError：年份超出范围”错误？）。具体来说，年份以某种方式标记为-1。这种日期在 PostgreSQL 中是可能的，但在 Python（以及 Django）中则不行。

您声明您正在使用默认的 Django 用户模型，该模型只有两个用于日期时间的字段，即

last_login

和

date_joined

。您只需在数据库中修复这些日期，以便它们具有合理的值。但在你这样做之前，你应该问自己一些问题：

• 这两个字段实际上都不是用户控制的，那么数据库如何最终拥有这样的值，因为它们通常由 Django 设置为有效的 Python 日期时间？
• 应用程序中是否存在某些 SQL 注入漏洞，用户可能通过该漏洞引入了这个有问题的值？
• 是否有其他进程与同一数据库交互，可能会弄乱该值？
• 是否有人有权访问数据库并且可能不小心设置了有问题的值？
• 应用程序中是否存在可能设置该值的错误（可能是一些时间增量/持续时间字段数学）？