Issue home form

Rate this topic: Evaluations: 1, 1.00 on the average.Evaluations: 1, 1.00 on the average.Evaluations: 1, 1.00 on the average.Evaluations: 1, 1.00 on the average.Evaluations: 1, 1.00 on the average.Evaluations: 1, 1.00 on the average.1.00 out of 6 based on 1 vote(s)
GK User
Tue Mar 03, 2015 8:09 pm
Reply with quote
Report this post
Hello

For some reason when I submit the fomr home I have invalid token http://www.the3dshape.com/

What can possibly be wrong ?

Tks !
User avatar
Gold Boarder

GK User
Thu Mar 05, 2015 7:35 am
Reply with quote
Report this post
I have submitted the message without any problem.
Also please check if your template is updated.
User avatar
Moderator

GK User
Thu Mar 05, 2015 8:14 am
Reply with quote
Report this post
Template is updated and I still have it. What can be the reason ?
User avatar
Gold Boarder

GK User
Sat Mar 07, 2015 7:09 pm
Reply with quote
Report this post
But what is the issue exactly - should I expect some kind of error or something?
User avatar
Moderator

GK User
Sun Mar 08, 2015 6:37 am
Reply with quote
Report this post
When I submit the home form I'm always redirected on a white page telling "Invalid Token" :(
User avatar
Gold Boarder

GK User
Mon Mar 09, 2015 7:30 pm
Reply with quote
Report this post
Please try to do the same with browser in incognito / private mode.
User avatar
Moderator

GK User
Tue Mar 10, 2015 6:33 am
Reply with quote
Report this post
Same :(
User avatar
Gold Boarder

GK User
Thu Mar 12, 2015 5:30 pm
Reply with quote
Report this post
Please check if your template is updated.
User avatar
Moderator

GK User
Sun Mar 15, 2015 3:32 pm
Reply with quote
Report this post
Updates but still same issue
User avatar
Gold Boarder

GK User
Mon Mar 16, 2015 11:33 am
Reply with quote
Report this post
Please send me a PM with:
1. URL to your website
2. login and password of user with admin/super-admin privileges (please create one for me)
3. ftp data (host, user, password)
4. link to this thread
User avatar
Moderator

GK User
Sun Mar 29, 2015 3:27 pm
Reply with quote
Report this post
I have sent provided data to our dev team so they could analize the issue.
User avatar
Moderator

GK User
Mon Mar 30, 2015 7:16 pm
Reply with quote
Report this post
One of our developers have checked your site and it seems that some strange caching must happen on server side as a special function used for anti spam techniques, generating special token which is used to verify form returns different value for homepage and form submit page. It shouldn't happen this way and it doesn't on any of our test sites.
The only fix (without investigating what happens on server itself) is the remove from file:
plg_gkcontact.php
this part of code:
Code: Select all
// check the token
JSession::checkToken() or die( 'Invalid Token' );

Sadly this way you are opening yourself on spam attacks (CSRF) through your site:
https://docs.joomla.org/How_to_add_CSRF ... g_to_forms
User avatar
Moderator


cron