"You are not allowed to access this URL"

The form seems to work fine, but randomly I get this error upon submit "You are not allowed to access this URL". The form is at: http://texansforgambling.com/index.php?option=com_chronocontact&task=send&chronoformname=rp3. What could be the reason?

Thank you,
Kamil

Hi Kamil,

I'm working on a fix for this issue which will come in RC5.1

Cheers
Max

Hi

Everything works fine with my form, including the Thank You message on my PC.
However, when I have given the form to try out to other people they get the message too :

"You are not allowed to access this URL".

I am not receiving the enquiry form data either, so at the moment the form is pretty useless.
Any short term fixes or temp solutions to this so at least I don´t have to disable the form from my site.. ?

Site address link to this page is :

http://www.thecostablancapropertyguide.com/index.php/inheritance-tax

Thanks

Richard

Hi Richard,

You may wait for RC5.1 OR you can open this file : components/com_chronocontact/chronocontact.php and remove these lines:

if(!JRequest::checkToken()){
		echo "You are not allowed to access this URL";
		return;
	}

Cheers
Max

Hey Max, I was doing some testing and was getting that error as well.
You suggested removing those lines. I was wondering why the error is happening and does removing those lines break anything else? Does it make the error go away or just prevents the message from showing?

Trying to predict if there will b situation where my users might not be able to send the form.

Thank you.
Mori

Hi mori,

It makes the error go away but it also reduces the security of your form a little.

There is a security risk of cross-browser linking when a form opened by one person is high-jacked by another user's browser. The security token is used to check that the user submitting the form is the same as one who opened it. The reisk is low but it's not zero.

Bob

Ah yes, I get it. I'm still not sure what was causing the error, I think in my case it had something to do with the file uploads, I got that message when sending a big file.

In fact here's the result of my testing.
PHP limit set to 2M,
Joomla limit set to 2M
Form limit set to 1900-1

Trying to send a file with 3.5Mbytes

Result: Form goes to the URL after submit, no file in the upload

Trying to send a file with 60mbytes

Result: After a few seconds I get "You are not allowed to access this URL"

Tried to send a file with 700bytes

Result: File under the min limit

I don't seem to be able to set off the max limit message.

Mori

Hi,

it looks like the session is lost when a big file is sent, I will try to find some workaround for these issues in RC5.1

Cheers
Max