3

I'm getting two errors when logging into the Civi admin back-end. The first is

Remote Profiles Enabled Warning: External profile support (aka "HTML Snippet" support) is enabled in >system settings. This setting may be prone to abuse. If you must retain it, >consider HTTP throttling or other protections.

The second is

Notice: Undefined offset: 1 in >/home/jgsny/public_html/administrator/components/com_civicrm/civicrm/CRM/Utils/>>check/Security.php on line 383

I navigate to system settings using the link in the error message which brings me to Misc settings page. The option "Accept profile submissions from external sites" is set to 'yes'. I change to 'no', save and return to the control panel, and the error message is gone. However, on next login the error is back and the setting has reverted to 'yes'

2
  • I am getting the same msg "Remote Profiles Enabled Warning: External profile support (aka "HTML Snippet" support) is enabled in system settings. This setting may be prone to abuse. If you must retain it, consider HTTP throttling or other protections." I upgraded to CiviCRM 4.7.13, and navigated to system settings using the link in the error message which brings me to Misc settings page. The option "Accept profile submissions from external sites" is set to 'yes'. I change to 'no', save and return to the control panel, and the error message is gone. However, on next login the error is back and t Dec 7, 2016 at 0:37
  • I just saw this warning on an upgraded site for first time. i set it to 'no' and saved, went back to Misc page and it remained set to 'no'. this was on 4.7.14
    – petednz - fuzion
    Dec 13, 2016 at 22:43

1 Answer 1

1

I'm guessing this is a 4.6 site based on the second error message? If upgrading isn't possible you could try something like updating the database directly:

UPDATE civicrm_setting SET value='i:0;' where name='remote_profile_submissions';
3
  • We have been getting this in our site since September or so; we're currently on 4.6.24. There are 2 entries in civicrm_setting for remote_profile_submissions - one is set to '0' and one is set to '1'. Is it safe to delete one of these rows, or set both to '0'? Thanks for any ideas anyone can offer.
    – Andyg8
    Jan 1, 2017 at 18:52
  • Is the domain_id field different? - you might have multidomain set up. Pick the one with the domain_id that corresponds to the one you want. See the civicrm_domain table entries if you're not sure which is which. If they are the same domain_id, then it's a duplicate and one can be removed.
    – Demerit
    Jan 1, 2017 at 22:45
  • thanks Demerit! We only have one domain, so I'll go ahead and remove the duplicate.
    – Andyg8
    Jan 2, 2017 at 11:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.