2022 Developer Survey is open! Take survey.
6 votes

Disable Secure Forms in config.php

As of 2.8 it's changed slightly... So if you want to disable "secure forms" you'll need to use this in config.php instead of what is posted elsewhere. $config['disable_csrf_protection'] = "y"; More ...
user avatar
  • 221
4 votes

How can I extend the life of an XID hash in EE 2.8.1?

1.) Ensure your server time is set correctly and check your ExpressionEngine server timezone setting. Both the form hash ID and the session ID are time sensitive. If ExpressionEngine is calculating ...
user avatar
  • 1,029
2 votes

Load XML via jquery.ajax causes an error

I checked and I can see the XID param being sent to the jquery.ajax by looking in chrome network panel, i can see the query string it builds. So we are good there. It sounds like you are sending the ...
user avatar
  • 2,255
1 vote
Accepted

Low Search Secure Action

The following is true for any form generated by EE, including the Low Search form: If you want the action url to be https, make sure the URL to the root directory of your site setting under Admin > ...
user avatar
  • 11.3k
1 vote

How can I extend the life of an XID hash in EE 2.8.1?

Just thought I'd throw this in there for others that might find this post. EE 2.8.1 removed the secure form option in the admin section of the CP. The only way to disable now is to add this to your ...
user avatar
  • 166

Only top scored, non community-wiki answers of a minimum length are eligible