Thread

We are trying to use Google’s CDN (Google Pagespeed Service) and when a user tries to edit an EE form, submit an EE entry or edit a template, they get the error message:

“You must be a logged-in member of this site in order to perform this action”

So, users can login, browse the site, and make updates through our database in other ways (comments, etc), but NOT when they try to process a big form.  Does EE have some extra sort of ip validation for forms that is different from session validation?

In the past, we have run into this issue with our previous CDN and load balancer because the IP address for all visitor becomes the CDN’s or load balancer… , but we were able to fix the problems with the modifications to our config.php and session.php that are in many other posts in the form.  Specifically:

$config['admin_session_type'] = "c";
$config['user_session_type'] = "c";
$config['require_ip_for_login'] = "n";
$config['require_ip_for_posting'] = "n";

And commenting out the ip check in session.php

// ->where('ip_address', $this->sdata['ip_address'])

Where is the extra validation that EE does for forms or template edits?

Hello Trend Hunter,

Thank you for posting your question here on the ExpressionEngine forums.

I am not aware of any other checks.

Can you show me the form?

Have you tried asking Google for help? This seems so very odd.

Please let me know.

Cheers,

We jusst solved it.  It turns out that Google Pagespeed’s CDN is slightly altering the user agent, which is enough to throw off EE’s validation of the user agent in the session.php file.  Seems like a bug they need to fix, but in the mean time, if anyone tries Pagespeed, you need to disable both the user agent check…

Hi Trend Hunter,

Glad you found the solution. Thank you for noting the solution here. Much appreciated.

If you need anything else, please just let me know by opening a new thread.

Cheers,