Update to 1.9.2.2: Login / Registration form not working (It's not the formkey)

Question

we updated our shop from 1.7.x to 1.9.2.2 and face a curios problem: On most of the devices the login form and registration form is working but not on all devices (Exactly, it works on all our devices, but some customers have this problem). After sending the forms the page is reloaded without error message and the action was not successful.

We inserted the hidden field "formkey" but are still having this problem. Any ideas where we can look at?

Our shop is www.begeisternderwahlkampf.de

Answer 1

I know that you already inserted the formkey, but I had the same problem and I discovered that I was using the formkey in the wrong way.

1 - Make sure that you use this code to insert the formkey:

<?php echo $this->getBlockHtml('formkey'); ?>

2 - The code should be right after the line:

<form action="<?php echo $this->getPostActionUrl() ?>" method="post" id="login-form">

3 - Make the change in the right files:

app/design/frontend/base/default/template/customer/form/login.phtml
app/design/frontend/base/default/template/customer/form/register.phtml

or, if you are using a custom theme:

app/design/frontend/COMPANY/THEME/template/customer/form/login.phtml
app/design/frontend/COMPANY/THEME/template/customer/form/register.phtml

Good luck :)

Answer 2

Thank you guys for your help.

We used the correct theme, checked this in the HTML source code on the site.

But the form key was programmed like this:

<input type="hidden" name="form_key" value="<?php echo Mage::getSingleton('core/session')->getFormKey() ?>" />

I replaced it with

<?php echo $this->getBlockHtml('formkey'); ?>

We will see, if this solves the problem for the last 10% of our visitors. My browser gets the same source code than before but maybe it makes the difference on the machines where it failed before. I will let you know.

Answer 3

This is issue of Magento function ->getParam()

The value of form_key is null at form_key processing time, it gives -1 value

You need to override controller action

Mage_Core_Controller_Varien_Action

from

protected function _validateFormKey()
{
    if (!($formKey = $this->getRequest()->getParam('form_key', null)) || $formKey != Mage::getSingleton('core/session')->getFormKey()) {
        return false;
    }
    return true;
}

To

protected function _validateFormKey()
{
     if (!($formKey = $this->getRequest()->getPost('form_key', null))
        || $formKey != Mage::getSingleton('core/session')->getFormKey()) {
        return false;
    }
    return true;
}

Now customer created successfully!