[UNABLE TO CONFIRM] "E-mail this to a friend" doesn't work

[carloff]

Even if connected, the E-mail this to a friend gives me the following message:
You are not authorized to view this resource.

Joomla 1.0.8 Stable.

Any suggestion on how to handle this ?

[crash777]

I remember this being and issue way back in 4.5 something...
The only site I could currently try it on is on 1.04 but it did work... anyone care to try it on 1.08?

[carloff]

I remember this being and issue way back in 4.5 something...
The only site I could currently try it on is on 1.04 but it did work... anyone care to try it on 1.08?

Thank you for your answer. I still didn't find how to handle this problem.

If anybody remembers where it was addressed in 4.5, I would appreciate a link to this thread.

[crash777]

The only thing I could find is:
http://www.mambers.com/showthread.php?t ... ail+friend

Not sure how much it might help...

[carloff]

The only thing I could find is:
http://www.mambers.com/showthread.php?t ... ail+friend

Not sure how much it might help...

Thank you for the link. There is no real answer in this thread, do you know which files are invoked when the e-mail button is pressed ? I could look into them...

[crash777]

Not sure exactly, sorry. I have retested a couple of times and it seems to work fine for me. Has this worked for you in the past?

[carloff]

Not sure exactly, sorry. I have retested a couple of times and it seems to work fine for me. Has this worked for you in the past?

It works in another site I did in Mambo 4.5.2.

The problem in my website started when I upgraded in Joomla 1.0.8, I think. This is not a huge thing, but I would prefer a full working e-mail button !

[crash777]

So you upgraded from 4.5.2 (M@mbo) to Joomla 1.08? Any number of things could cause the email friend problem if this is the case.. Seeing that some sites do work and some may not, it is unlikely it is a bug in Joomla, however, I am not sure of the files invoked during this process... Does anyone know?

[carloff]

So you upgraded from 4.5.2 (M@mbo) to Joomla 1.08? Any number of things could cause the email friend problem if this is the case.. Seeing that some sites do work and some may not, it is unlikely it is a bug in Joomla, however, I am not sure of the files invoked during this process... Does anyone know?

No, the website where I have this problem was created directly in Joomla 1.07, then I upgraded to 1.08. Another site I did is still in M@mbo 4.5.2 and the e-mail button works there...

[carloff]

Finally, I found in content.php the following code, which contains mosNotAuth.

* Shows the email form for a given content item.
* @param int The content item id
*/
function emailContentForm( $uid ) {
global $database, $my;

$row = new mosContent( $database );
$row->load( $uid );

if ( $row->id === null || $row->access > $my->gid ) {
mosNotAuth();
return;
} else {
$query = "SELECT template"
. "\n FROM #__templates_menu"
. "\n WHERE client_id = 0"
. "\n AND menuid = 0"
;
$database->setQuery( $query );
$template = $database->loadResult();
HTML_content::emailForm( $row->id, $row->title, $template );
}

Who knows what to edit in order to solve the problem: You are not authorized to view this resource.

http://www.macgraph.com

[MaxX]

I am having this exact same problem upgrading from joomla 1.0.7 to joomla 1.0.8

I will try removing the mosnotauth() part..

[MaxX]

Ok I fixed it by commenting these lines which checks some sort of 'hash' which always fails.

//$validate = mosGetParam( $_POST, mosHash( $mosConfig_db ), 0 );
//if (!$validate) {
// probably a spoofing attack
// mosErrorAlert( _NOT_AUTH );
//}

[carloff]

Thanks a lot, it now works perfectly !

Yves


http://www.macgraph.com

[MaxX]

Can somebody from joomla fix this hash function in the next version maybe?

[ChuckCourter]

Ok I fixed it by commenting these lines which checks some sort of 'hash' which always fails.

//$validate = mosGetParam( $_POST, mosHash( $mosConfig_db ), 0 );
//if (!$validate) {
// probably a spoofing attack
// mosErrorAlert( _NOT_AUTH );
//}

I'm having the same problem. Are we talking "com_content/content.php" here? I just tried the above on this and no help.

Is this the correct file?

Thanks,
Chuck

[MaxX]

Ok I fixed it by commenting these lines which checks some sort of 'hash' which always fails.

//$validate = mosGetParam( $_POST, mosHash( $mosConfig_db ), 0 );
//if (!$validate) {
// probably a spoofing attack
// mosErrorAlert( _NOT_AUTH );
//}

I'm having the same problem. Are we talking "com_content/content.php" here? I just tried the above on this and no help.

Is this the correct file?

Thanks,
Chuck

Yes thats the correct file.

If commenting it out dosent work then try commenting out some of the further checks that are being made..

[stingrey]

I have checked the email to friend ability on 1.0.8 and 1.0.9 SVN and both worked as expected.

I reexamined the code people referenced regards mosHash and it is working as it should.



All these checks were introduced to limit the possibility that this function would be misused.

[quiddities]

I am running a fresh install of 1.0.11 Stable and was still having this issue. This topic helped my find where the code was located & I was able to isolate my issue which I have not found anywhere else. If you have the email icon turned off in your global config you will receive this error... even if you you have the email icon turned on for a particular page. I commented out the following code.

// if ($mosConfig_hideEmail) {
// echo _NOT_AUTH;
// return;
// }

I just wanted to post this in case someone else still came across this issue.