<div dir="ltr">Thanks, Conrado. I'm glad to know I'm not alone in this problem. The workaround I added yesterday is almost the same as what was suggested, though I added a check that the URL isn't <a href="http://accounts.google.com">accounts.google.com</a> rather than a check on the module. Still, it works. I'm still quite surprised that this wasn't part of the recent hot fix for 7.1. Maybe next time.<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Mar 27, 2018 at 5:02 AM, Conrado Maggi <span dir="ltr"><<a href="mailto:comaggi@gmail.com" target="_blank">comaggi@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto">Check this for a workaround </div><div dir="auto"><br><div dir="auto"><a href="http://code.vtiger.com/vtiger/vtigercrm/issues/889" target="_blank">http://code.vtiger.com/vtiger/<wbr>vtigercrm/issues/889</a></div><div dir="auto"><br></div><div dir="auto">Conrado </div></div><div dir="auto"><br></div><div><br><div class="gmail_quote"><div><div class="h5"><div>El El lun, 26 mar 2018 a las 23:02, Alex Hall <<a href="mailto:ahall@autodist.com" target="_blank">ahall@autodist.com</a>> escribió:<br></div></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><div>Update: in retrospect, OF COURSE the referrer doesn't contain the CRM's URL. The referrer is <a href="http://accounts.google.com" target="_blank">accounts.google.com</a>, after all. Yet how can VTiger include a Google extension, but not include an exception in this rule, so Google's URLs can get back to the CRM? I'm going to add such an exception manually, but is there a reason I shouldn't? A better way to do this? Something I've missed? Thanks.<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Mar 26, 2018 at 4:51 PM, Alex Hall <span><<a href="mailto:ahall@autodist.com" target="_blank">ahall@autodist.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div><div><div>Hello list,<br></div>When any of our users go to settings > extensions > Google so they can sign in and sync their calendars/contacts, they get an error after allowing or denying Google access. When Google's page appears, they can sign in, then authorize or cancel VTiger's request to access their account. When they choose either option, though, a page appears that simply says "Illegal request" and has "go back" link below the text.<br><br></div>I've found the source of the problem in request.php. Specifically:<br><br> global $site_URL;<br> if ((stripos($_SERVER['HTTP_<wbr>REFERER'], $site_URL) !== 0) && ($this->get('module') != 'Install')) {<br> throw new Exception('Illegal request');<br> }<br><br></div>I read this as "if the referrer URL doesn't start with the VTiger install's base URL, and VTiger isn't being installed, throw this exception". This must mean that the URL doesn't start with <a href="http://crm.mysite.com" target="_blank">crm.mysite.com</a>. Yet, the URL of this page is:<br><a href="https://crm.mysite.com/index.php?module=Google&view=Authenticate&service=Google&error=access_denied#" target="_blank">https://crm.mysite.com/index.<wbr>php?module=Google&view=<wbr>Authenticate&service=Google&<wbr>error=access_denied#</a><br><br></div>The "error" should be because I hit "cancel", not wishing to sync my Google account just now, but this also happens if I click "allow". The point is, that URL does indeed start with the URL of VTiger; in config_inc.php, I have $site_URL set to "<a href="https://crm.mysite.com/" target="_blank">https://crm.mysite.com/</a>". Can anyone suggest why this exception is being thrown, since the URL should be fine? Thanks in advance.<span class="m_3063499472802947211m_6392793589334442519HOEnZb"><font color="#888888"><br><div><div><br clear="all"><div><div><div><br>-- <br><div class="m_3063499472802947211m_6392793589334442519m_8678461579452963524gmail_signature"><div><div><div>Alex Hall<br></div>Automatic Distributors, IT department<br></div><a href="mailto:ahall@autodist.com" target="_blank">ahall@autodist.com</a><br></div></div>
</div></div></div></div></div></font></span></div>
</blockquote></div><br><br clear="all"><br>-- <br><div class="m_3063499472802947211m_6392793589334442519gmail_signature" data-smartmail="gmail_signature"><div><div><div>Alex Hall<br></div>Automatic Distributors, IT department<br></div><a href="mailto:ahall@autodist.com" target="_blank">ahall@autodist.com</a><br></div></div>
</div></div></div>
______________________________<wbr>_________________<br>
<a href="http://www.vtiger.com/" rel="noreferrer" target="_blank">http://www.vtiger.com/</a></blockquote></div></div>
<br>______________________________<wbr>_________________<br>
<a href="http://www.vtiger.com/" rel="noreferrer" target="_blank">http://www.vtiger.com/</a><br></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div>Alex Hall<br></div>Automatic Distributors, IT department<br></div><a href="mailto:ahall@autodist.com" target="_blank">ahall@autodist.com</a><br></div></div>
</div>