Tickets :: Comment on [#9289] Cannot save preferences after upgrade to 1.2.7. We cannot verify that this request was really sent by you. It could be a malicious request.

* Your Email Address
* Spam protection	Enter the letters below: __.. ..__ . . . (__ \|\ \|[__)\| \|_/ .__)\| \\|[__)\|___\| \
Comment	>> The users cannot save their preferences anymore. >> They get the dreaded "We cannot verify that this request was really >> sent by you. It could be a malicious request. If you intended to >> perform this action, you can retry it now" >> >> It also happens without having to save anything, by just going to the page: >> services/prefs.php?app=imp&group=identities >> >> There is nothing in the Horde log, appart from >> IMAP errors: SECURITY PROBLEM: insecure server advertised AUTH=PLAIN >> >> I've tried disabling tokens, cookies, nothing helped. >> The server is running a dual IP stack (v4 and v6). Net_DNS has been >> removed because it doesn't work with IPv6. >> We're using PHP sessions. > > Folks, > > I just had a new client call me about this issue when she logged into > her webmail. I just wanted to attach my findings. In her case, when i > had Virus Scan turned on to verify and check webpages, this error > appeared, but when i turn it off the problem went away. So it looks > like my issue is when a virus scan program is being utilized to > verify webpages the error occurs. Basically you are creating your own > personal proxy scanner, so this could be why it doesn't think it is > coming from the same source. > > Don't know if this helps you at all, just wanted to share my findings. > >
Attachment
Watch this ticket