@BladeBronson Do you know what and how sends request to "executeSaveSettings"? I have a theory: our proper  user interface sends that request via AJAX POST, but some bots and crawlers accessed it via GET without providing other required variables. Maybe we should check here if the request wasPosted() (to rule them all) instead of check for particular property?