<div dir="ltr">Ian,<div><br><div><div>The patch enforces strict check on accessing resources of the CRM.</div></div><div>Before reaching the conclusions - let us review the setup and access details.</div><div><br></div><div><div><div dir="ltr" style="font-family:arial,sans-serif;font-size:13.3333339691162px">Make sure your site_URL matches the way you access from browser. Mismatch leads to"Illegal request" error</div></div></div><div><br></div><div>Regards,</div><div>Prasad</div></div></div><div class="gmail_extra"><br clear="all"><div><span style="border-collapse:collapse;font-family:arial,sans-serif;font-size:13px"><b>Connect with us on: </b><a href="http://twitter.com/vtigercrm" style="color:rgb(0,0,204)" target="_blank">Twitter</a> <b>I</b> <a href="http://www.facebook.com/pages/vtiger/226866697333578?sk=wall" style="color:rgb(0,0,204)" target="_blank">Facebook</a> <b>I</b> <a href="https://blogs.vtiger.com/" style="color:rgb(0,0,204)" target="_blank">Blog</a><b> I</b> <a href="http://wiki.vtiger.com/index.php/Main_Page" style="color:rgb(0,0,204)" target="_blank">Wiki</a> <b>I </b><a href="https://discussions.vtiger.com" style="color:rgb(0,0,204)" target="_blank">Forums </a><b>I</b> <a href="https://www.vtiger.com/" style="color:rgb(0,0,204)" target="_blank">Website</a></span></div>
<br><div class="gmail_quote">On Tue, Sep 16, 2014 at 8:48 AM, Ian Stern <span dir="ltr"><<a href="mailto:i4629193@gmail.com" target="_blank">i4629193@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Andrew thanks for advice. clearing cache help in my workstation but all ipads and androids have still no access to crm. Vtiget issued bug not patch!<br><br></div>ian<br></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="h5">On Tue, Sep 16, 2014 at 7:30 AM, SIAM Translations <span dir="ltr"><<a href="mailto:info@siam-translations.com" target="_blank">info@siam-translations.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><div dir="ltr">As an additional help to this issue I report as follow:<div><br></div><div>I installed new copy of 6.0 on same server. Changed in config.inc.php database to the one what patch were installed. This version works on the other machine within my office but not on the machine I experienced problem first time. Shared element is that I applied same admin credential in new installation as in the patched one. Confused a lot ...</div><div><br></div><div>As </div><div><div><div class="gmail_extra"><br clear="all"><div><div dir="ltr"><div><br>
<br></div></div></div>
<br><div class="gmail_quote">On Tue, Sep 16, 2014 at 6:51 AM, SIAM Translations <span dir="ltr"><<a href="mailto:info@siam-translations.com" target="_blank">info@siam-translations.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Morning, I overwrite patched files with original ones and the error still here. It means that previously uploaded patch changed something out of bunch of patched files. Waiting for your solution guys.<br><div><br></div><div>Andrew Smith</div><div class="gmail_extra"><br clear="all"><div><div dir="ltr"><div><br>
<br></div></div></div>
<br><div class="gmail_quote"><div><div>On Mon, Sep 15, 2014 at 10:12 PM, Ian Stern <span dir="ltr"><<a href="mailto:i4629193@gmail.com" target="_blank">i4629193@gmail.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div dir="ltr"><div>I have same error. Cou,ld you share solution if found?<br><br></div>Ian<br></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div>On Mon, Sep 15, 2014 at 7:50 PM, SIAM Translations <span dir="ltr"><<a href="mailto:info@siam-translations.com" target="_blank">info@siam-translations.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div dir="ltr">applied patch to 6.0 and got: <span style="color:rgb(0,0,0);white-space:pre-wrap">{"success":false,"error":{"code":"Illegal request","message":"Illegal request"}}</span><div><span style="color:rgb(0,0,0);white-space:pre-wrap">Can do nothing right now. Any clue?</span></div><div><span style="color:rgb(0,0,0);white-space:pre-wrap"><br></span></div><div><span style="color:rgb(0,0,0);white-space:pre-wrap">Andrew Smith</span></div><div class="gmail_extra"><br clear="all"><div><div dir="ltr"><br></div></div><div class="gmail_quote"><div><div>On Mon, Sep 15, 2014 at 6:12 PM, Prasad <span dir="ltr"><<a href="mailto:prasad@vtiger.com" target="_blank">prasad@vtiger.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div dir="ltr">Dear members,<div><br></div><div>If you’re using Vtiger CRM Open Source versions 5.4.0 or 6.0.0, we recommend that you apply the below listed security patch to plug up a CSRF vulnerability that was recently discovered.<br><br>We would like to thank the numerous security organizations that identified and reported the issue to us. We would also like to extend our thanks to Sanehdeep Singh at ControlCase International Pvt. Ltd for direct assistance with isolating and fixing the issue.<br><br>You can download the security patch here:<br><ul><li><a href="http://sourceforge.net/projects/vtigercrm/files/vtiger%20CRM%206.0.0/Core%20Product/vtigercrm-600-security-patch3.zip/download" target="_blank">vtigercrm-600-security-patch3.zip</a><br></li><li><a href="http://sourceforge.net/projects/vtigercrm/files/vtiger%20CRM%205.4.0/Core%20Product/VtigerCRM540_Security_Patch4.zip/download" target="_blank">VtigerCRM540_Security_Patch4.zip</a><br></li></ul><div>Regards,</div><div>Vtiger Team</div><div><br><div><span style="border-collapse:collapse;font-family:arial,sans-serif;font-size:13px"><b>Connect with us on: </b><a href="http://twitter.com/vtigercrm" style="color:rgb(0,0,204)" target="_blank">Twitter</a> <b>I</b> <a href="http://www.facebook.com/pages/vtiger/226866697333578?sk=wall" style="color:rgb(0,0,204)" target="_blank">Facebook</a> <b>I</b> <a href="https://blogs.vtiger.com/" style="color:rgb(0,0,204)" target="_blank">Blog</a><b> I</b> <a href="http://wiki.vtiger.com/index.php/Main_Page" style="color:rgb(0,0,204)" target="_blank">Wiki</a> <b>I </b><a href="https://discussions.vtiger.com" style="color:rgb(0,0,204)" target="_blank">Forums </a><b>I</b> <a href="https://www.vtiger.com/" style="color:rgb(0,0,204)" target="_blank">Website</a></span></div>
</div></div></div>
<br></div></div>_______________________________________________<br>
<a href="http://www.vtiger.com/" target="_blank">http://www.vtiger.com/</a><br></blockquote></div><br></div></div>
<br></div></div>_______________________________________________<br>
<a href="http://www.vtiger.com/" target="_blank">http://www.vtiger.com/</a><br></blockquote></div><br></div>
<br></div></div>_______________________________________________<br>
<a href="http://www.vtiger.com/" target="_blank">http://www.vtiger.com/</a><br></blockquote></div><br></div></div>
</blockquote></div><br></div></div></div></div>
<br></div></div>_______________________________________________<br>
<a href="http://www.vtiger.com/" target="_blank">http://www.vtiger.com/</a><br></blockquote></div><br></div>
<br>_______________________________________________<br>
<a href="http://www.vtiger.com/" target="_blank">http://www.vtiger.com/</a><br></blockquote></div><br></div>