Since upgrading to Revolution Beta 5, I am getting redirected to a new page with the following error, upon form submission:
Unauthorized Access in spformproc
Any ideas as to why?
Ok, I have fixed the first issue ("Unauthorized Access in spformproc") by overriding the session_cookie_domain variable as context variables.
I have many different websites running under different contexts, and upon upgrading to Beta 5, I had only changed "localhost" out globally to a single specific domain so I could get in through manager.
The CAPTCHA issue seems unrelated except in that it also started appearing after the Beta 5 upgrade.
Quote from: d9000 at Dec 22, 2009, 01:56 PM
Ok, I have fixed the first issue ("Unauthorized Access in spformproc") by overriding the session_cookie_domain variable as context variables.
I have many different websites running under different contexts, and upon upgrading to Beta 5, I had only changed "localhost" out globally to a single specific domain so I could get in through manager.
The CAPTCHA issue seems unrelated except in that it also started appearing after the Beta 5 upgrade.
I think you may have been able to solve it by editing the allowed referrers entry and addin all possible base urls. Sorry, I should have mentioned that earlier.
It’s possible that the CAPTCHA add-on needs to be updated for Beta5. I’ll try to find time to check it out.
Quote from: d9000 at Dec 22, 2009, 09:52 PM
Quote from: BobRay at Dec 22, 2009, 02:46 PM
I think you may have been able to solve it by editing the allowed referrers entry and addin all possible base urls. Sorry, I should have mentioned that earlier.
It’s possible that the CAPTCHA add-on needs to be updated for Beta5. I’ll try to find time to check it out.
Thanks, editing the allowed referrers entry did work, and it did save some time as I had not gone through all sites with the session_cookie_domain override.
In fact, I found that CAPTCHA only works on the domain for which session_cookie_domain value is set in System Settings - overriding session_cookie_domain as a context variable does not seem to help there.
If you’re using Revo Beta-5, I believe you’re supposed to remove that system setting along with session_cookie_path (I think that’s the other one, they’re gone from my install).
The only session-related system settings I have are secure, lifetime, and classname.
That said, CAPTCHA is not working for me because the $_SESSION[’veriword’] is only being set intermittently and often holds an older value (and I only have one domain - localhost).
Quote from: d9000 at Dec 28, 2009, 10:05 AM
Quote from: BobRay at Dec 22, 2009, 11:41 PM
If you’re using Revo Beta-5, I believe you’re supposed to remove that system setting along with session_cookie_path (I think that’s the other one, they’re gone from my install).
The only session-related system settings I have are secure, lifetime, and classname.
That said, CAPTCHA is not working for me because the $_SESSION[’veriword’] is only being set intermittently and often holds an older value (and I only have one domain - localhost).
Ah, thanks. That did the trick - CAPTCHA is working now. The three settings are session_name, session_cookie_path, and session_cookie_domain. I thought I had deleted them directly through phpMyAdmin when first doing the upgrade, but apparently they were not gone. Then somehow I forgot that those values were supposed to be removed when it came time to troubleshoot the form.
Is CAPTCHA working reliably for you with SPForm and Revolution Beta-5? For me, the verification fails about 1/3 of the time due to some problem with session variables (on a localhost XAMPP install). I’m hoping this is a problem with my infrastructure rather than with SPForm or MODx. Let me know if you have any trouble.
Quote from: d9000 at Dec 28, 2009, 08:10 PM
Yes, CAPTCHA seems to be working reliably. I just tried 5 times in a row on 5 different sites and had no problems. I also confirmed that it is stopping on an incorrect string.
However, I just realized that although I am reaching the confirmation page successfully, I never received any emails. I’ll have to double-check the configuration settings.
Thanks, that’s good to know.
As for the unreceived mail, if SPForm thinks the mail was sent and you don’t receive it, it’s almost always either a bad "recipient" address or (more often) the host has mail() turned off, in which case you have to use SMTP.
