SPForm issue: 'Error: Disallowed HTTP Referer'

86 Posts

Hi Bob,

I just migrated our site to MODX Cloud, to the latest version (2.6.5), after our site was hacked.

Everything's working fine, except the "Disallowed HTTP Referer" error is back with our SPForm 'Contact Us' page.

Might there be a known issue with the SPForm settings and MODX Cloud 2.6.5? I haven't changed anything from the old site, which was working.

Thanks in advance,

Karl Forsyth

24,544 Posts

BobRay Reply #12, 8 years, 1 month ago

Do you still have these properties in the tag?

    &chkFormRefNotBlank=`1` 
    &chkFormRefNotSelf= `0` 
    &chkFormRefOwnServer=`1`
    &spfDebug=`0`

Did I help you? Buy me a beer
Get my Book: MODX:The Official Guide
MODX info for everyone: http://bobsguides.com/modx.html
My MODX Extras
Bob's Guides is now hosted at A2 MODX Hosting

86 Posts

kjf Reply #13, 8 years, 1 month ago

Yes. Here's the full code in the form:

[[!SPForm@SoCoSPFormProperties? 
    &spfDebug=`0`
    &chkFormRefNotBlank=`1` 
    &chkFormRefNotSelf= `0` 
    &chkFormRefOwnServer=`1`
    &requireVerify=`1`
    &spfCssPath=`assets/css/soco-spform.css`
]]
<script type="application/ld+json">
{
  "@context": "http://schema.org",
  "@type": "Organization",
  "url": "https://socotango.org/about/contact-us/",
  "name": "SoCo Tango",
  "contactPoint": {
    "@type": "ContactPoint",
    "contactType": "'Contact Us' Form"
  }
}
</script>

24,544 Posts

BobRay Reply #14, 8 years, 1 month ago

Try this:

&chkFormRefNotBlank=`0` 
&chkFormRefNotSelf= `0` 
&chkFormRefOwnServer=`0`

Some servers don't set the necessary fields.

Did I help you? Buy me a beer
Get my Book: MODX:The Official Guide
MODX info for everyone: http://bobsguides.com/modx.html
My MODX Extras
Bob's Guides is now hosted at A2 MODX Hosting

86 Posts

kjf Reply #15, 8 years, 1 month ago

Hi Bob,

Those worked. I was able to open the Contact Us form, and submit it with a math problem test.

However, the response upon submitting is now this:

*******
There were problems with your submission.

This form was accessed from an unauthorized server!(https://socotango.org/about/contact-us/)

This may be through no fault of your own and is probably not immediately correctable.
Please come back and try again later.
*******

Is this referencing a property that needs to be changed, now that it running on a new MODX Cloud instance?

Thanks,

Karl Forsyth

24,544 Posts

BobRay Reply #16, 8 years, 1 month ago

Check the &formProcAllowedReferers property of the SPForm snippet (set it in the SPForm tag on the contact page).

[[!SPForm? 
   &formProcAllowedReferers=`bobsguides.com,www.bobsguides.com`
   ...
]]

Did I help you? Buy me a beer
Get my Book: MODX:The Official Guide
MODX info for everyone: http://bobsguides.com/modx.html
My MODX Extras
Bob's Guides is now hosted at A2 MODX Hosting

Answered SPForm issue: 'Error: Disallowed HTTP Referer'