Quoting Liam Hoekenga <[EMAIL PROTECTED]>: > I installed HEAD. We use a custom auth handler, and have hordeauth set to > true in imp/servers.php > > We're entering the application through https://mail.example.edu/horde/, > and now we're getting.. > > "It cannot be verified that this request was really sent by you. It could > be a potentially malicious request." > > How do we fix this? How do we provide required tokens to let us in, or > how do we turn this off?
There aren't currently tokens on login - can you dig a bit into this? The only way you should get a token error on that URL is if Horde thinks you're logging out. It's be helpful to know the code path that is triggering. -chuck -- IMP mailing list - Join the hunt: http://horde.org/bounties/#imp Frequently Asked Questions: http://horde.org/faq/ To unsubscribe, mail: [EMAIL PROTECTED]
