Rouncube update password plugin not working after upgrade 1.6.11

[ipangsan]

Hi All

i`ve tried all the best googling and find out about this error.

i`ve following this

Roundcude change password not working

Known issue

Email Password Change via Webmail not working

Anyone else having problems with this? I’ve tried it in both Roundcube and Rainloop, and I get errors in both. Not very helpful errors. I’m on latest version 1.4.2 I remember experiencing this a couple of years ago and it was due to the roundcube config not being updated with the correct HESTIA port, where it had been changed from the default. Seems the correct port is set in rainloop plugin ini file and in roundcube plugins/password/config file I’ve tried different passwords from simple to ve…

But no luck.

version 1.6.11
rouncube 1.6.0

CSRF has disable, still Could not new save password.

Thanks

[eris]

You are correct:

CSRF check was to strict and didn't bypass the check...

Will fix it

[ipangsan]

Hi @eris

Appreciate with your respond. So what should i do ? remove CSRF or waiting else>

[eris]

In Server settings under “Security” “System” you can disable CSRF check set it to off

[ipangsan]

mark to be solution. cuus, god willing will donate to this community. really appreciate and thank you @eris

[vannkorn]

I’m also unable to let users update their own passwords through Roundcube webmail until I turned this option off. However, one question, is it safe in other areas where the CSRF protection is needed?

[eris]

Yes it is only an extra security layer. Will be fixed with next release…