Skip to main content

Questions tagged [form-key]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
39 views

Vulnerability Risk: Sequential numbering pattern of Address ID

How can I prevent an attacker from exploiting the sequential numbering pattern of address IDs in my application, which allows them to delete addresses belonging to other users and potentially lead to ...
ANNT's user avatar
  • 1
0 votes
0 answers
47 views

Magento 2 Anti-CSRF Tokens/Form-Key For GraphQL

I need to validate a form-key / CSRF Token for a graphql mutation. Is there any way in Magento 2 to validate form-key or CSRF token for graphQl mutation. We know default Magento2 controller already ...
Pritam Biswas's user avatar
0 votes
1 answer
36 views

Magento 2 - Invalid Form Key for new storeview

I created a new storeview and noticed that I can't log in as a customer. It works on the main store view perfectly fine. There are no errors in the server and magento logfiles. I always get: "...
Black's user avatar
  • 3,390
1 vote
1 answer
478 views

Magento 2 form key changes on going from front-end to back-end

I have a button on front-end category pages for editing these pages. On click it redirects to dashboard rather than category edit form in admin side. $objectManager = \Magento\Framework\App\...
aich.khalid's user avatar
0 votes
1 answer
309 views

Login to Magento 2. from outside, with Guzzle, returns a invalid form_key

I'm trying to login to Magento 2, with a form which contains a "from_key". I scrape this form_key but I'm not able to successfully login. Has someone any idea how to make this work? This is ...
Antonio's user avatar
0 votes
3 answers
529 views

"Invalid Form Key, please refresh the page? " - addtocart

I am testing website deployed based on Magenta Template Framework, the problem that occurred is that the cart kept being empty even the add to cart link has been ran. And furthermore, i kept getting ...
pseudox's user avatar
2 votes
0 answers
61 views

Error 500 in Magento 1.9.3 products admin page

I tried to upgrade magento in order to solve login problem But after I revert back I can't access Products page in Admin. Looking errors I receive PHP Fatal error: Call to undefined method ...
George K.'s user avatar
1 vote
0 answers
103 views

Magento2 Invalid form key. Please refresh the page

I am getting the error "Invalid form key. Please Referesh the page" while create the customer account.
Adil's user avatar
  • 183
1 vote
1 answer
959 views

Magento 2: How to use form key parameter in GET request?

I'm using magento 2.3.4 and i tried to generate a delete cart item like this in phtml file: <?php $formKey = $this->helper('Vendore\Module\Helper\Data')->getFormKey() ?> <a ...
jojo's user avatar
  • 39
1 vote
2 answers
896 views

Magento 2.3.5: Showing Invalid Form key on every page

We are facing an issue after upgrading Magento version to 2.3.5. Invalid form key. Please refresh the page.   is showing on every page only on safari browser.
Mandar Parbate's user avatar
0 votes
1 answer
370 views

How to keep the FormKey updated on pages with Varnish enabled?

I'm running a Magento 2.3.4 store behind a Varnish server. I can't keep the FormKey up to date in the frontend as the pages are served by the Varnish caches, so I have errors in sending the newsletter ...
Alfredo Lanzetta's user avatar
0 votes
0 answers
322 views

Invalid Form key.Please refresh the page

If I visit my website first time it give me an error of Invalid form key.Please try again lator. It is giving same error while add product in the cart and it directs the page to the Home page in ...
manoj kumar's user avatar
3 votes
5 answers
7k views

Custom Module Controller: Invalid security or form key. Please refresh the page

I have a custom module with an admin controller, but when I try to access from the administration page I get the following error: My controller is in Controller/Adminhtml/Login/Index.php class Index ...
Miguel's user avatar
  • 569
0 votes
2 answers
199 views

Invalid Form Key. Please refresh the page error occur in magento 2

if i try to pay with paytm am getting this error "Invalid Form Key. Please refresh the page error" How do i fix it
user81874's user avatar
0 votes
1 answer
78 views

Even after Adding Form Key in phtml Magento 2.3 shows invalid form key error often

I added Form key in all forms. But in some forms still, I am getting Invalid form key Please refresh error often. How to solve this? Is I need to add further things to solve this? Kindly help me.
Kowsigan Atsayam's user avatar
0 votes
1 answer
188 views

Invalid Form Key. Please refresh the page while creating new users in Magento 2.3

Whenever adding new users or editing, updating the products in frontend shows the error Invalid Form Key. Please refresh the page. *I increased the value of input_max_var but still it showing the ...
Kowsigan Atsayam's user avatar
1 vote
0 answers
159 views

Magento 2.3.2, Amazon Sales Channel: Invalid security or form key. Please refresh the page

I have installed amazon sales channel v2 for magento 2.3.2 store. Now when I try to click 'Connect to amazon store' from 'Setup Amazon Store' section, I'm getting error 'Invalid security or form key....
SKM's user avatar
  • 43
0 votes
1 answer
72 views

Product Page Bug Magento 2.3.1

I am making a product page that has a product with multiple options for height and width in a dropdown. When I more than about 40 options, the page wont save them anymore. The page will just say ...
Josiah's user avatar
  • 56
1 vote
0 answers
343 views

How to remove "form_key" in magento2

How can I remove "form_key" globally in my magento2 store?
Mohammed Muzammil's user avatar
0 votes
1 answer
39 views

I have Problems when uploaded the image on my product in backend magento 2.3.2

today when try to upload the image on my product, magento show me this error firts time magento show me this error becauses, before i edited all my products, and now magento show me this.
Emmanuel Ortega's user avatar
0 votes
1 answer
453 views

Get session form key in javascript m1

In my product review form the form key fetched from core/session is cached and does not pass the validation upon form submission. So, Mage::getSingleton('cor/session')->getFormKey() and $this->...
Asadov Kamran's user avatar
4 votes
0 answers
270 views

Invalid form key. please refresh the page. Discount code and Paypal review

This one seems different to all the previous questions about this error message. I'm getting the following message "Invalid form key. please refresh the page." when trying to enter a discount code or ...
Will Wright's user avatar
0 votes
0 answers
24 views

Magento2 people on same network logged into each others account with form keys disabled

With magento config:set admin/security/use_form_key 0 People say that sometimes they are logged into each others accounts. I'm not sure how this is possible since they never log into each others ...
user avatar
1 vote
1 answer
854 views

Magento 2.3.1 | Continuously Redirecting To Homepage & Getting "Invalid Form Key. Please refresh the page" Error

I am working on a payment module using Magento 2.3.1. I have already implemented CsrfAwareActionInterface and 2 of its methods (createCsrfValidationException() & validateForCsrf()) in my ...
Fayyaz Khattak's user avatar
2 votes
0 answers
13 views

Why did the Payment section stopped working after switching primary domain? And - does Form Key Validation On Checkout need to be enabled?

Porto theme I switched the primary domain in our Magento 1.9.4 store and then the Payment section of the checkout stopped working altogether - you could select a Payment method by placing a tick in ...
Allysin's user avatar
  • 260
0 votes
1 answer
859 views

magento2 Invalid Form Key on chrome

Invalid Form Key. Please refresh the page? My chrome browser always give this error even if I have changed the php.ini configuration max_input_vars = 75000 I am using nginx server and public IP (...
Dhananjay Harel's user avatar
5 votes
2 answers
11k views

Magento 2.3 — Invalid Form Key. Please refresh the page

Getting Invalid Form Key. Please refresh the page error not able to do any action after upgrade of Magento 2.2.5 to Magento 2.3.
Bangaram sandhya's user avatar
5 votes
4 answers
9k views

External Request - Invalid Form Key Magento 2.3

I sent a “POST” request via external server for version magento-2.3 My internal Magento URL cannot verify and response is "Invalid Form Key. Please refresh the page." as a summary, i want to ...
mehmetselim's user avatar
2 votes
0 answers
99 views

Magento 1.7 OnepageCheckout SaveBilling returns 200 -> nothing happens

When I click on the continue button inside the billing section, the tiny loading icon appears and a request is triggered. It returns 200 with an empty response. But then... nothing happens and there ...
René Barkow's user avatar
3 votes
4 answers
5k views

Magento2.3 Product Add to Wishlist Invalid Form Key. Please refresh the page?

I am using php 7.2.13 version and magento 2.3 latest version in xampp. When i do add to wishlist and save anything am getting Invalid Form Key. Please refresh the page? this error.
udhay's user avatar
  • 33
2 votes
1 answer
1k views

Form Key Validation Error

So I have fixed my form key validation issues but my admin is still showing an error message. Important: Formkey validation on checkout disabled. This may expose security risks. We strongly ...
DevAnd's user avatar
  • 526
0 votes
2 answers
311 views

Magento 2 formkey validator is not working properly in my custom module, return a 500 page

I have an issue that i can not use formkey Validator in my custom module, the module is working fine for me if i am just echoing some text messages, but if i construct the $formKeyValidator or the $...
devHarry's user avatar
2 votes
1 answer
676 views

Magento 2 - What's the purpose of Formkey Validator?

I want to know what does the formkey validator do : Magento\Framework\Data\Form\FormKey\Validator
devHarry's user avatar
2 votes
0 answers
908 views

Magento 2 : Invalid Form Key. Please refresh the page

I get this error when I try to save a category, Invalid Form Key. Please refresh the page. I tried the following solutions from various other posts Increase php_value max_input_vars 75000 Try to ...
nuwaus's user avatar
  • 2,334
0 votes
3 answers
4k views

How to add formkey to a custom form?

I'm using the code... <?php echo $block->getBlockHtml('formkey') ?> inside my custom phtml file but all I get is blank ''. I see this same code used throughout Magento Core. How can I ...
jamil's user avatar
  • 985
0 votes
1 answer
685 views

Magento2.2.4 - Invalid form key while save product

I have Magento 2.2.4. I have tried increasing max_input_vars in php.ini file. I have cleared var/cache, browser cache, removed domain cookies. Still, get the error when trying to edit an existing ...
Dipak Solanki's user avatar
5 votes
4 answers
2k views

Magento 2.2.4 Customer are unable to logout

i´ve just installed a fresh Magento2 on my webspace to prepare the migration of my Magento 1.9. I installed my theme (Infortis) and created my products and did the first test-salse. Everything fine......
Harry's user avatar
  • 51
0 votes
2 answers
471 views

How to get a product review form form key in magento 1.9?

I want form key of product review form in magento 1.9 , Can anyone tell me how to get product wise formkey programatically.
Sanjay Gohil's user avatar
  • 2,200
0 votes
2 answers
694 views

Patch SUPEE-10415 applied but Form Key Validation message still appears

Patched Magento Open Source 1.9.3.6 with SUPEE-10415. Message: Formkey validation on checkout disabled. This may expose security risks. We strongly recommend to Enable Form Key Validation On ...
rjdbgut's user avatar
  • 73
0 votes
0 answers
249 views

Different form key in template and controller

When I am directly accessing customer/account/login page then, values for $this->getRequest()->getParam('form_key'); and Mage::getSingleton('core/session')->getFormKey(); are different when ...
Anshu Mishra's user avatar
  • 8,990
0 votes
2 answers
583 views

Magento block in before_body_end with form_key being cached

Magento block in before_body_end with form_key being cached We use a block for login form data in the block before_body_end. Only since some time we have seen this block is cached and the form_key ...
snh_nl's user avatar
  • 5,452
0 votes
1 answer
229 views

Form key doesnt change remains the same - resulting 403 forbidden error on few links magento 1.9.2

i have further investigated in my case and i have identified that the form key generated is not generating new form key . instead it is using the same form key for all users and pages www....
user3512810's user avatar
2 votes
0 answers
1k views

Shopping cart always "empty" after 1.9.3.4 upgrade

I have upgraded magento to 1.9.3.4 via magento connect from 1.9.3.3 and now whenever I try to add a product to the cart it says shopping cart empty. I added <?php echo $this->getBlockHtml('...
boliviab's user avatar
5 votes
4 answers
11k views

Magento 2 Form key

if (!$this->_validateFormKey()) { // do something } Any Magento 1 equivalent in Mangento 2 for _validateFormKey function. And Can anyone explain how and where Magento checks formkey, when any form ...
Amit Singh's user avatar
  • 1,775
0 votes
1 answer
610 views

1.9.3.4 Different shipping address stuck

I upgraded to 1.9.3.4 from 1.9.3.3. When I go through checkout and select ship to a different address other than billing no form keys seem to be present in the header. (saveShipping) When you go ...
Stephen Smith's user avatar
1 vote
1 answer
1k views

Magento upgrade to 1.9.3.4 - is forms working without form_key output in templates

I've just upgraded to Magento v1.9.3.4 and have Enabled Form Key Validation On Checkout as recommended. Magento also advices: Important! Enabling this option means that your custom templates used ...
Holly's user avatar
  • 4,873
1 vote
1 answer
163 views

CE v1.9.3.4 (v2) did NOT fix the "Enable Form Key Validation On Checkout" Was released July 12,2017

@Ryan-hoerr YESTERDAY sent out message that there was v2 Patch or upgrade to v1.9.3.4 from v1.9.3.3 because of the form_key checkout problem which the Magento CE 1.9.3.4 Release Notes was supposed to ...
sailfish's user avatar
1 vote
2 answers
847 views

Error with Form Key Validation on logout

I just enabled form key validation and there's an error showing up on logout: My Magento version is 1.9.2.2 with last patch 9767 applied Invalid method Mage_Core_Model_Session::renewFormKey(Array ( )...
Sam Provides's user avatar
0 votes
2 answers
3k views

Magento 2 - invalid form key (add/delete from cart)

I have serious problems with custom Magento 2 theme and (probably) formkey cashing. I have 2 views of exactly same e-shop. - View 1: Luma Theme - View 2: Custom Theme (Luma child) - overriding ...
JBrada's user avatar
  • 126
2 votes
1 answer
99 views

I've just applied SUPEE-9767 to a Magento 1.6.2.0 site and there is no formkey option to enable. How has this happened and how can I fix it please?

I have applied the SUPEE-9767 patch for the correct version (1.6.2.0) of Magento and in the admin area, I can see the warning at the top of the page, indicating that the patch was successful. However,...
David's user avatar
  • 73