Joomla! Issue Tracker - CMS

Download
Launch
Feeling Lucky

[#48304] - [6.1] Remove csrf token check from POWcaptcha

RTC PR-6.1-dev Pending

User tests: Successful: Unsuccessful:

avatar HLeithner
HLeithner
25 Aug 2026
  • I read the Generative AI policy and my contribution is either not created with the help of AI or is compatible with the policy and GNU/GPL 2 or later.

Summary of Changes

Removes the CSRF token form the POW captcha, this doesn't work with "normal caching" and doesn't has impact on security. The ajax request is a read only operation and doesn't create too much serverload.

Testing Instructions

  1. Activate the POWCaptcha.
  2. Activate "Normal Caching"
  3. Create a com_contact email form
  4. Open the form in 2 browsers
  5. click on the POWCaptcha checkbox

Actual result BEFORE applying this Pull Request

Browser 1: works
Browser 2: generates an error

Expected result AFTER applying this Pull Request

Browser 1: works
Browser 2: works

Link to documentations

Please select:

  • Documentation link for guide.joomla.org:

  • No documentation changes for guide.joomla.org needed

  • Pull Request link for manual.joomla.org:

  • No documentation changes for manual.joomla.org needed

avatar HLeithner HLeithner - open - 25 Aug 2026
avatar HLeithner HLeithner - change - 25 Aug 2026
Status New ⇒ Pending
avatar joomla-cms-bot joomla-cms-bot - change - 25 Aug 2026
Category ⇒ Front End Plugins
avatar ChristineWk ChristineWk - test_item - 25 Aug 2026 - Tested successfully
avatar ChristineWk
ChristineWk - comment - 25 Aug 2026

I have tested this item ✅ successfully on 44878b4

This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/48304.

avatar ChristineWk
ChristineWk - comment - 25 Aug 2026

I have tested this item ✅ successfully on 44878b4

This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/48304.

avatar SniperSister SniperSister - test_item - 25 Aug 2026 - Tested successfully
avatar SniperSister
SniperSister - comment - 25 Aug 2026

I have tested this item ✅ successfully on 44878b4

This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/48304.

avatar SniperSister
SniperSister - comment - 25 Aug 2026

I have tested this item ✅ successfully on 44878b4

This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/48304.

avatar alikon alikon - change - 25 Aug 2026
Status Pending ⇒ Ready to Commit
avatar alikon
alikon - comment - 25 Aug 2026

RTC

This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/48304.

avatar alikon
alikon - comment - 25 Aug 2026

RTC

This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/48304.

avatar HLeithner HLeithner - change - 6 Sep 2026
Labels Added: Updates Requested PR-6.1-dev
avatar tecpromotion tecpromotion - change - 9 Sep 2026
Status Ready to Commit ⇒ Fixed in Code Base
Closed_Date 0000-00-00 00:00:00 ⇒ 2026-09-09 18:20:13
Closed_By ⇒ tecpromotion
Labels Added: RTC
Removed: Updates Requested
avatar tecpromotion tecpromotion - close - 9 Sep 2026
avatar tecpromotion tecpromotion - merge - 9 Sep 2026

Add a Comment

Login with GitHub to post a comment