Can't get this_form return link to work

[simone]

I'm using fmbadhandler.php and have set up my own error page and have it working fine in terms of the basics. However, I cannot seem to get the return link to work after a few hours of trying.

I'm as sure as I can be that I've got the TARGET_$URL setting and the this_form link correct based on what I've been reading - they are as follows:

On the form page:
<input type="hidden" name="this_form" value="http://web.simonewalsh.com/services/quote.php" />

$TARGET_URLS in fmbadhandler.php:
$TARGET_URLS = array("http://web.simonewalsh.com/")

(nb. site design has yet to be tested outside of Mac browsers, so apologies if you're seeing layout issues!).

When I try to process the form with missing required fields I get a 403 'forbidden' error. I've read that this used to happen with older versions of formmail due to a URL being in the URL, but I gather that shouldn't be a problem with newer versions and I downloaded it today.

In case it helps, I've discovered that if I have the this_form link set to something like "/services/quote.php" and the $TARGET_URLS set to "/services/" then the link does work in terms of showing up as a functioning link. However of course the URL can't be parsed with the rest of it missing so the link goes nowhere and I get an error message.

Thanks for your help - and thanks for what seems to be exactly the right piece of software for my needs!

Simone

[russellr]

Hi,

Yes, it's a tricky looking problem.

I think your server has security rules that prevent URL parameters (stuff after the ?).

In FormMail, set PUT_DATA_IN_URL to false.

If I'm right, that should sort out any such security problem.

Let me know if there's progress to look at.

[simone]

Hi Russell

Thanks for being so quick to respond. I've tried what you suggested and am relieved to say that it's worked! I had tried the same thing earlier, but I must have had another setting wrong somewhere along the line as it didn't work for me then.

Will this change cause any issues that I should be aware of?

Thanks again.

Simone

[russellr]

Hi,

PUT_DATA_IN_URL should be false by default, and, in fact, we really should get rid of it completely.

The reason it's there and is set to true by default is mainly historical.

The only time it would cause a problem is if your server didn't support PHP sessions properly.

So, in short, you should be fine!

Good luck with the rest of your development.