I am using the address field in a custom registration form and it uses ajax to format the address fields. By default drupal uses system/ajax (http://api.drupal.org/api/drupal/includes--ajax.inc/group/ajax/7).

How can I not restrict that path so that ajax can work?

Comments

bobooon’s picture

bobooon commented
Issue summary: View changes
Status: Active » Closed (won't fix)

Drupal 6 EOL is February 26, 2016. For that reason, Drupal 6.x version of this module is no longer supported.

jdanthinne’s picture

jdanthinne commented
Version: 6.x-1.1 » 7.x-1.2

Got the same issue with anonymous trying to send an image with an AJAX call…
Just added

(!empty($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest'), // Ajax
to the list of checks in required_login.module.
bobooon’s picture

bobooon commented

@jdanthinne You should add the Ajax path in question to the modules exclude paths configuration. For example if the Ajax callback path is /ajax/send-image add that path to the exclude paths configuration. That effectively turns off restrictions for that specific Ajax callback without hacking the module.

Keeping as Closed (Won't Fix) for two key reasons:

  1. Individual Ajax callback paths can be added to the excluded paths configuration to prevent anonymous restriction.
  2. Blocking Ajax callback paths by default allow for tighter anonymous security measures when necessary.