On 08/21/2016 05:24 PM, Caesar Samsi wrote:
> The wiki noted below is about securing admin web page.
> 
> Not about confirmation page.


Yes, but it is the same underlying issue. You post data from a form and
the response just refreshes the page without action.

This can occur with admin, admindb, confirm and options pages for any of
the reasons mentioned in <https://wiki.list.org/x/4030602>.

Look at the raw source of the confirm page. What is the value of the
action= parameter in the FORM tag? Is it identical to the URL in the
address bar in your browser including domain and scheme?

-- 
Mark Sapiro <[email protected]>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan
------------------------------------------------------
Mailman-Users mailing list [email protected]
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Reply via email to