Horde - "Cannot Verify This Request Was Really Sent By You"

mitchkill

Member
Dec 26, 2008
9
0
51
Guys,
One of my clients is experiencing a problem with the Horde webmail interface. We recently migrated his domain to a new cPanel server. (WHM 11.36.0 (build 14) on CENTOS 6.4 x86_64 xenpv) Since we migrated him over, he has been receiving the following message quite often when trying to send messages from Horde:

We cannot verify that this request was really sent by you. It could be a malicious request. If you intended to perform this action, you can retry it now.
He tells us that when he clicks "Send" again, the message usually goes successfully.

It looks like it has something to do with the XSRF security token, but I don't want to monkey around too much with the internals of Horde/IMP. Anyone have any thoughts on how to fix this problem?
 

mitchkill

Member
Dec 26, 2008
9
0
51
Egrueda,
Well, I tried some monkeying around with the Horde codebase to some success, but the problem still came up occasionally. (And it's probably not a good idea to muck around too much with the Horde code) I then tried to do a forced cpanel upgrade, and that seems to have taken care of the problem.

/scripts/upcp --force

So you may want to give the forced upgrade a shot. Hopefully it fixes the problem for you!
 

egrueda

Member
Mar 29, 2011
21
0
51
Madrid, Spain
Thanks, mitchkill
I wonder if you checked horde version before and after the update, to let us know if the reinstall or the update made the fix.
Thanks for sharing your experience with me.
 

mitchkill

Member
Dec 26, 2008
9
0
51
It didn't seem to have updated to a newer version of horde/imp. It looks like it just did a refresh of the horde code. Keep in mind that the problem I experienced started from the moment that I installed cPanel on that server so I'm guessing there was a problem on installation that the upcp command fixed.