Forums

Joomla Plugin: "You are not allowed to access this URL"

bitbonk 01 Mar, 2010
I just moved our Joomla 1.5 based size from a subdomain to the root domain. I did this by redirecting the teh rootdomain to the directory of that subdomain. Additionally I modified the configuration.php of Joomla so that $livesite now contains the rootdomain.

Everything seems to work as expeceted excpetion Chronoforms:

After I click "submit" on the form I get a message stating "your are not allowed to access this url" and the form is not submitted to the two email recipients. Is there anything I need to watch out for when moving the domain?
GreyHead 01 Mar, 2010
Hi bitbonk,

Hmm I'm not sure that I fully understand this but $livesite & ChronoForms don't seem to like each other. ChronoForms pick up the OnSubmit URL from the Form URL and adds &task=send to it. So I guess that this breaks if the Form URL is somehow not valid . . .

What do you see as the two URLs - for the form and after submission?

Bob
bitbonk 01 Mar, 2010
before
[http://www.mydomain.de/kinderhaus/anmeldung]

after
[http://mydomain.de/index.php?option=com_chronocontact&task=send&chronoformname=Anmeldung&Itemid=78]

maybe it is because of these browserfriendly urlshortening? I still don't get why it is not shortened anymore afer submit. can chornoforms not handle it too ?

I can sucessfully access
[http://mydomain.de/index.php?option=com_chronocontact&chronoformname=Anmeldung&Itemid=78]
but I get the error when I try to acess
[http://mydomian.de/index.php?option=com_chronocontact&task=send&chronoformname=Anmeldung&Itemid=78]
bitbonk 01 Mar, 2010
FYI
this is my onsubmit code:
<?php
$MyForm =& CFChronoForm::getInstance('Anmeldung');

$MyFormEmails =& CFEMails::getInstance($MyForm->formrow->id);

$MyFormEmails->setEmailData(1, 'subject', 'Anmeldung ' . JRequest::getString('vorname') . ' ' . JRequest::getString('nachname') . ' (*'.JRequest::getString('geburtsdatum') . ')');

$MyFormEmails->setEmailData(2, 'subject', 'Ihre Anmeldung von ' . JRequest::getString('vorname') . ' ' . JRequest::getString('nachname') . ' bei Cocolores e.V. Dresden');
?>


And this is my beofre submit after sent email (probaly still wrong):
<p>Ihre Anmeldungsdaten wurde übermittelt. Eine Bestätigungsmail wurde an <b>{email}</b> verschickt.</p>


Not usre if this is of any relevance.

redirect URL is emtpy and submit URL too.
bitbonk 01 Mar, 2010
Also note, that if I turn debugging on, everything works as expected and the mails are sent. Only that I get the debug display after submit showing the sent data.
GreyHead 01 Mar, 2010
Hi bitbonk,

Please try turning the Check Token to OFF in the form general tab.

I suspect that somehow the session data cookie is getting confused.

Bob
bitbonk 01 Mar, 2010
That worked. Now what does this tell me. Do what does "Check token" actually mean? Is it safe to keep it turned off or do I need to do something to root out the actual problem?
GreyHead 01 Mar, 2010
Hi bitbonk,

The CheckToken was introduced by Joomla in v1.5.6 or thereabouts. It's intended to confirm that the person submitting the form is the same as the person who opened the form session. This blocks a possible security gap through high-jacked browser sessions. I don't know much more than that, you'll find more info on the Joomla security listing I think.

Unless your site is very high-traffic, high security, or a hacker magnet for some reason I think that the risk is vanishingly small.

Bob
bitbonk 01 Mar, 2010

Unless your site is very high-traffic, high security, or a hacker magnet for some reason ...
Bob



That is probably not the case for a local kindergarden site.🙂 Thanks again!
This topic is locked and no more replies can be posted.