[norbie]

I'm getting lots of users trying to register to my site who are getting a "Security Error".

I tried it myself and it worked fine

Are they doing something wrong, I haven't seen this before?

An email I got including screenshots:

Quote:

Ok, I just tried to sign up. Here is a picture of my information before I click "Submit":


And here is a picture of what happens after I click submit:


I click "Back" on my browser and try again, but no luck. As you can see, I've typed in the security code correctly, but it still will not work.

I just tried it again, but this time I went back to the beginning and registered from there, all over again. I got a different security code, typed IT in correctly, and still got the "security error" message. I hope you can fix this problem soon...

-Ben

[DJ Maze]

CVS has a function that validates a POST request.

PHP:

	function check_post()
	{
		if ($_SERVER['REQUEST_METHOD'] != 'POST') { return false; }
		global $module_name;
		if ($_SESSION['SECURITY']['page'] != $module_name) { cpg_error(_SEC_ERROR, _ERROR_BAD_LINK); }
		return true;
	}

This validation fails in 1 of 2 ways:

1. not allowing cookies

2. website has bug and another webpage is loaded between both page requests like:
a. index.php?name=Your_Account&file=register
b. index.php?name=Forums
c. index.php?name=Your_Account&file=register

[bigern75]

odd. dfaddons.com is doing the same thing on themes; dragonfly, default, mountain rush and cpgnews
All the other themes, using FF, works just fine.

[norbie]

Could it be theme related?

I have changed my site's theme recently, around the same time as this problem started.

I changed to fisubsilverish.

[djdevon3]

I've never heard of a theme messing up a registration. It's handled as a module. So the only thing theme related for it would be the Opentable and Closetable in theme.php

The most likely culprit could be some modifications to the Your_Account module for stuff like profiles_pro. Maybe even some custom registration fields that aren't working right. Is it running default modules and no custom fields?

[norbie]

Yes they're all default modules, the only thing I've changed recently is the theme, and I think security.php (CVS) was updated recently.

[DJ Maze]

the complete strange part is that it only says "Security Error"
normaly it should show why the error occures.