Thread

I just finished an upgrade to EE 2.6.1 and when I try to set Process form data in Secure Mode I can click Yes, but when I click Submit it reverts back to No.

Currently the Preferences are set to Session ID Only for the Contro Panel and Cookies only for User Session Type.

I have been getting a lot of spam on the site lately and would like to see if I can at least reduce it.

Thanks.

I know this is from a couple of months ago, but did you come up with a solution to this? I’m having the same problem and can’t figure out why and this seems to be the only relevant result to my search.

You know I never did hear back on this and for the life of me can’t even remember the problem. What version of EE are you running?

I’m running 2.7.2, so it might not be the same, but I was getting a (maybe unrelated?) error when doing a site search:

unknown column ‘csrf_exempt’ in ‘field list’ ...

Which should be in my exp_actions db table, so I was trying to troubleshoot by turning on the ‘Process Form Data…’ setting.

Are you using the standard simple search?

Yes, just the standard simple search which has always worked before.

Can you post your code for it here?

No problem:

{exp:search:simple_form channel="about|barrel-to-keg|contact|education|feature|housing|how-can-i-help|jobs|misc_content|news|nutrition|resources|news" result_page="search/results" no_result_page="search/no_results" search_in="everywhere"}
<fieldset>
    <input type="text" name="keywords" id="search" value=""  />
 <input type="submit" id="submit" name="submit" class="button" value="Search" />
</fieldset>
{/exp:search:simple_form}

Everything looks right, so I am not sure what the underlying problem is. I recommend that you take your question to the much more responsive forum on Stack Exchange: http://expressionengine.stackexchange.com.

Thanks for your help! I appreciate you taking a look anyway.

It looks like when upgrading EE, it doesn’t create csrf_exempt in action table.
You can fix it by adding an csrf_exempt field in action table, using tinyint(1) as data type, default value will be 0.

I should have replied to this—but I wasn’t 100% sure I was correct. But that’s what I did, too, and haven’t had any problems since. Thanks!