Bootwhmcs / bootwhmcs

Template files for Bootwhmcs
75 stars 42 forks source link

domainchecker.php issue when enabled use of CSRF tokens for the Domain Checker form #42

Closed yashodhank closed 10 years ago

yashodhank commented 10 years ago

When option General Settings -> Security -> Tick to enable use of CSRF tokens for the Domain Checker form is selected, then form directly leads to Login Page instead of showing domain name availability report.

Is there any solution, if someone still want to use [Tick to enable use of CSRF tokens for the Domain Checker form] option but show domain name availability instead of showing login page when domain name is entered on home page domain checker box.

ghost commented 10 years ago

Will look into this shortly, does the regular WHMCS themes show the domain form or do they go to the login form as well?

yashodhank commented 10 years ago

Hi,

Regular Template of WHMCS shows Domain availability immediately without showing login form, even if CSRF option is selected.

I have checked it with Default, Classic Template of WHMCS.

Thank you

On Tue, Jun 24, 2014 at 4:37 PM, Freddy notifications@github.com wrote:

Will look into this shortly, does the regular WHMCS themes show the domain form or do they go to the login form as well?

— Reply to this email directly or view it on GitHub https://github.com/Bootwhmcs/bootwhmcs/issues/42#issuecomment-46958265.

ghost commented 10 years ago

Can't replicate this. What domain search form are you talking about more specifically?

yashodhank commented 10 years ago

In General Settings -> Security Tab CSRF Tokens: Domain Checker Tick to enable use of CSRF tokens for the Domain Checker form

*Then it was causing abnormal behaviour

I guess with new update of WHMCS it have got fixed