Actions are not receiving data when method is post
By juanjosegzl
Hello everyone, I have a problem with my forms in elgg, I am going to write about login form but this happens in all of them.
When I click login the call is made, according to firebug post data is sent, elgg action is detected on (engine/handlers/actions.php or something like that) then the file actions/login.php is called. get_input('username') is empty and login failed.
When I changed the method to GET everything works fine. It used work but yesterday I renamed my .htaccess to htaccess for a while, now I moved it back to .htaccess. Could be a reason to my problem? I am hosting on Dreamhost. Elgg version is 1.8.8
thank you for your help
Elgg Technical Support
Get support from other Elgg users
- Matt Beckett@Beck24
Matt Beckett - 0 likes
- juanjosegzl@juanjosegzl
juanjosegzl - 0 likes
- Team Webgalli@webgalli
Team Webgalli - 0 likes
- juanjosegzl@juanjosegzl
juanjosegzl - 0 likes
- Matt Beckett@Beck24
Matt Beckett - 0 likes
- juanjosegzl@juanjosegzl
juanjosegzl - 0 likes
- juanjosegzl@juanjosegzl
juanjosegzl - 0 likes
You must log in to post replies.I can assure you that actions accept data as post.
Got a code sample of what's not working?
Is anything else not working after playing with .htaccess? Make sure it's correct, if you have to use the htaccess from elgg 1.8.13
Speaking of (and completely unrelated to your question), you should upgrade to the most recent release, there have been some important security fixes since 1.8.8
After some tests I found the problem is __elgg_token and __elgg_ts when is combined with post on form, which is default.
I deleted tokens from html (using firebug) and it worked.
Elgg actions wont work if you remove tokens from the forms. Also it will cause a major security issue because it will open the login action of your site to bots and they can do any action on your site after logging in. With some simple coding, they can send all your members spam messages, fill your site with junk contents etc..
Try to find the issue and use the API's properly. Bypassing a security feature is not a fix for the issues.
I understand, I only deleted the tokens for testing purposes but are activated by default.
what I don't understand is how this stop working :S
Are you sure you've sent the correct variables?
Sure, I did not change anything in code, oly thing I did was to rename .htaccess for a moment and then stop working.
Perhaps was not working before that, but last time I changed code I tested site and it was working fine.
Maybe it is a issue with hosting provider, indeed this is not first time this happen. But last time I did a clean re installation, I can't do that now :S
Any progress I let you know, thank you for your help :P
Everything was about PHP version, I changed from 5.3.x to 5.2.x
It is working now