Closed (outdated)
Project:
Localization client
Version:
6.x-1.x-dev
Component:
Code
Priority:
Normal
Category:
Bug report
Assigned:
Unassigned
Reporter:
Created:
28 Oct 2009 at 13:09 UTC
Updated:
9 Aug 2016 at 08:45 UTC
Jump to comment: Most recent
Comments
Comment #1
arbel commentedsame here...
Comment #2
arbel commentedAny progress on this?
Comment #3
gábor hojtsyI'd welcome if you could help figure this out, since I've never used the module in this use case. Looks like drupal_valid_token() might be the culprit here, since it generates a form token based on your session ID (http://api.drupal.org/api/function/drupal_valid_token/6), but it you are anonymous, Drupal will not save a session for you unless it has data associated. This is solely a suspicion.
Comment #4
arbel commentedI'm not really sure I can help but I can explain the use case better:
simply put, I'd like to translate the login and registration form elements, but you have to anonymous to see them..
Idan
Comment #5
askibinski commentedGabor, you are completely right, removing the check for drupal_valid_token fixes the problem:
On line 434 of l10n_client.module, changing:
into:
fixes the problem.
I'm not sure if && drupal_valid_token($_POST['form_token'], 'l10n_client_form') is really necessary here, as there are other permission checks in place.
Comment #6
gábor hojtsyWell, I'd rather attempt to add data to your session in l10n_client if you are anonymous, so you get a session saved. The token check is there to avoid cross-site request forgery attacks, and is a required for security reasons.
Comment #7
gábor hojtsyRetitling to better explain what is going on.
Comment #8
gábor hojtsyDrupal 6 is not supported. The same problem was not reported for Drupal 7.