[3.3.13] The submitted form was invalid. Try submitting again.

[AYHJA]

Greetings all, and thanks in advance for any help received. I've seen others with this issue and worked my way through a few fixes, but I still can't seem to solve this.

Support Request Template
What version of phpBB are you using? phpBB 3.3.13
What is your board's URL? https://ayhja.net
Who do you host your board with? Empire Hosting
How did you install your board? I installed it myself a very long time ago via FTP.
What is the most recent action performed on your board? Updated from 3.3.12 to 3.3.13
Is registration required to reproduce this issue? No
Do you have any MODs installed? Yes?
Do you have any extensions installed? Yes?
What MODs do you have installed? A basic quick reply hack I think
What extensions do you have installed? I either don't have any, very few, and/or can't remember
What styles do you currently have installed? subsilver, prosilver
What language(s) is your board currently using? English
Which database type/version are you using? MySQL 5.2.1
What is your level of experience? I've been at this a while, but out of practice apparently!
What actions did you take (updating your board; installing a MOD, style or extension; etc.) prior to this problem becoming noticeable? After getting a few emails that people could not login despite going through the password reset process, I decided to update the board. I was able to login to the ACP after updating the DB, and when I logged out, I could not log back in.

Please describe your problem: After the update, I started get the "submitted form invalid" error. Like others on this forum with the same error, I tried resetting the password, setting the cookie, using a private window, a new browser, contacting my host, changing my php version. Nothing I've done yet has worked. I have had this issue before, but I haven't had it in a while. I wonder an .htaccess file may help, or if there's something else I'm overlooking.

UN: Test
PW: 1234

Any username combo will throw the error from what I can tell, it does not give the UN/PW combination is incorrect error. Thank you in advance!

[janus_zonstraal]

Can't login, recaptcha error

[Noxwizard]

The version of prosilver_se that you have installed says it's for phpBB 3.2.8. You need to update the style.

[warmweer]

Support Request Template
What version of phpBB are you using? phpBB 3.3.13

What extensions do you have installed? I either don't have any, very few, and/or can't remember
What styles do you currently have installed? subsilver, prosilver

Why is your prosilver version 3.3.12?
and your prosilver_se = version 3.2.8

as to extensions: you don't have to remember them: just check the ext folder (and you can see the version in composer.json)

ext/david63/sitelogo
flerex/linkedaccounts
phpbb/collapsiblecategories
senky/postlinks
vse/abbc3

[AYHJA]

Thanks for the quick response and assistance, I really appreciate it.

@warmweer

I don't know. I do textbook upgrades. I download the package, delete the files it tells me to, upload the files it tells me to, and go on about my merry way. I just uploaded the latest version of prosilver_se. I just downloaded the file again and reuploaded the folder. Thanks for catching that.

Here are the extensions I have installed according to my EXT folder:

cabot > quickreplytoggle
david63 > sitelogo
fierex > linkedaccounts
kasimi > postnumbers
phpbb > collpislbecategories, viglink
phpbbmodd3ers > adduser, banhammer
senky > postlinks
vse > abbc3, dbtool

@janus_zonstraal

When I try to login via a private browser, that's the message that I get. Recapcha error, but I don't see any recapcha. When I try from my regular browser, I get the invalid form error.

[thecoalman]

Using FTP delete everything in /cache folder except ,htaccess and index.htm.

Edit: you are using cloudflare, are you restoring the original IP?

[Mick]

I'm sorry, but we do not provide any support for sites suspected of illegal activity. Therefore this topic is now closed. For further information or requests to get your topic reopened, feel free to send a private message to one of the Community Team.

[Kailey]

Re-opened. User does not appear to have any illegal activity on their board.

[AYHJA]

Thanks Kailey, I appreciate it.

I do use cloudflare, but I’m not sure what you mean. I saw that another user had that issue, so I did mention it to my host as a possible fix.

What do you mean when you say restore the original IP?

[thecoalman]

When you are using Cloudflare every IP is Cloudflare IP and this can cause issues with cookies/sessions etc.

They have http header that contains the real IP and it needs to be restored.

https://developers.cloudflare.com/suppo ... sitor-ips/

If you are on shared hosting that option only works if the host will install it for you. There is two extensions but they are older and I don't know if they work anymore.

[janus_zonstraal]

This one is still working on my site:
https://www.phpbb.com/customise/db/exte ... masked_ip/

[AYHJA]

^ that looks promising, janus ^

Do you know if I can install it without being able to login? I'm contacting my host right now with the potential fix you listed coalman, thank you.

[janus_zonstraal]

Can't you disable cloudflare for a moment?

[thecoalman]

You can go into DNS records and turn proxy off however there might be delay for that to take effect.

Optionally you can edit local DNS. To take full advantage of their DDOS protection this should not work, Ideally you firewall ports 80 and 443 except for cloudflare IP's but most people can't or don't.

On windows open:

C:\Windows\System32\drivers\etc\hosts and add:

Code: Select all

127.0.0.1 example.com
127.0.0.1 www.example.com

That IP is for local instll if for example you have test forum using XAMMP. You need to change them to the IP of your server.

There may be some hiccups with some browser, close the browser after making changes and restart. I know in Firefox you need to take additional step and turn off DNS over HTTPS as it will ignore local value.

When you are done you can just comment out the lines:

Code: Select all

#127.0.0.1 example.com
#127.0.0.1 www.example.com

[AYHJA]

I'm going to try that fix soon coalman, thank you. I am getting a new error now:

You exceeded the maximum allowed number of login attempts. In addition to your username and password you now also have to pass the CAPTCHA test.

I'm not sure how to address that, since no CAPCHA shows up and I still can't log in. I talked to my host, and this is what they said:

The Apache module mod_remoteip is already installed in the server and we have configured it to restore original visitors IP. The RemoteIPTrustedProxy is currently configured with the updated list all of Cloudflare's IP ranges.

I sincerely appreciate all the help and suggestions thus far, if anyone has anything else that they think I can do, please share.