Horde - "Cannot Verify This Request Was Really Sent By You"

[mitchkill]

Guys,
One of my clients is experiencing a problem with the Horde webmail interface. We recently migrated his domain to a new cPanel server. (WHM 11.36.0 (build 14) on CENTOS 6.4 x86_64 xenpv) Since we migrated him over, he has been receiving the following message quite often when trying to send messages from Horde:

We cannot verify that this request was really sent by you. It could be a malicious request. If you intended to perform this action, you can retry it now.

He tells us that when he clicks "Send" again, the message usually goes successfully.

It looks like it has something to do with the XSRF security token, but I don't want to monkey around too much with the internals of Horde/IMP. Anyone have any thoughts on how to fix this problem?

 

[egrueda]

Same problem here when deleting some emails.
Any clue?

 

[mitchkill]

Egrueda,
Well, I tried some monkeying around with the Horde codebase to some success, but the problem still came up occasionally. (And it's probably not a good idea to muck around too much with the Horde code) I then tried to do a forced cpanel upgrade, and that seems to have taken care of the problem.

/scripts/upcp --force

So you may want to give the forced upgrade a shot. Hopefully it fixes the problem for you!

 

[egrueda]

Thanks, mitchkill
I wonder if you checked horde version before and after the update, to let us know if the reinstall or the update made the fix.
Thanks for sharing your experience with me.

 

[mitchkill]

It didn't seem to have updated to a newer version of horde/imp. It looks like it just did a refresh of the horde code. Keep in mind that the problem I experienced started from the moment that I installed cPanel on that server so I'm guessing there was a problem on installation that the upcp command fixed.