Checksum or hash not pulling up contribution pages for anonymous users in Drupal 7

Question

This documentation https://docs.civicrm.org/user/en/latest/common-workflows/tokens-and-mail-merge/#checksum-contribution-pages shows

        Checksum for Contribution Pages¶
To send people to a contribution page use this path where IDNUMBER is the ID of your contribution page:

Drupal: http://example.org/civicrm/contribute/transact?reset=1&id=IDNUMBER&{contact.checksum}&cid={contact.contact_id}

It works when I am logged in, because it does not need the hash, but does not work for anonymous users. Other questions on StackExchange indicate Need &cs= before the hash, but that also does not work. (Seems really weird to have a query string without a variablename= as part of it.)

Examples where the domain is removed for security: Original attempt failed: .../civicrm/contribute/transact?reset=1&id=2&c8950946c952d8cdec67695d0b10cd03&cid=13299

Changed attempt failed (adding the "cs=" also makes it fail when I am logged in as admin): .../civicrm/contribute/transact?reset=1&id=2&cs=c8950946c952d8cdec67695d0b10cd03&cid=13299

Reordering the elements does not work, as I expected it would not.

Answer 1

It looks like you are taking the contact hash directly from the database and sticking it in the URL yourself. That won't work (and for security reasons you don't want to expose the contact hash because that doesn't change).

Instead, you want a contact checksum, which is generated from the hash. You can get a checksum by sending an email or mailing with the {contact.checksum} token in it. If you want to get one manually for whatever reason, you can use the API4 Explorer and do Contact getChecksum.