Published: November 13, 2015
Last updated:

Customer login form does not work after SUPEE-6788

Problem description

After installing SUPEE-6788 or upgrade to Magento 1.9.2.2 customers can not login anymore. The login page is loaded correctly, however after filling in login name / email and password submitting the form does not result in success authorization. The page is just refreshed and login form is shown again.

Cause

SUPEE-6788 patch and Magento 1.9.2.2 version added a new hidden field to the login form and your design theme overrides default form and have no such field in template/customer/form/register.phtml or template/persistent/customer/form/register.phtml in your theme.

Solution

  • update template/customer/form/register.phtml or template/persistent/customer/form/register.phtml in your theme with adding one line (highlighted in the diff below), just like the patch updated base/default theme:
    --- app/design/frontend/base/default/template/persistent/customer/form/register.phtml
    +++ app/design/frontend/base/default/template/persistent/customer/form/register.phtml
    @@ -42,6 +42,7 @@
             <div class="fieldset">
                 <input type="hidden" name="success_url" value="<?php echo $this->getSuccessUrl() ?>" />
                 <input type="hidden" name="error_url" value="<?php echo $this->getErrorUrl() ?>" />
    +            <input type="hidden" name="form_key" value="<?php echo Mage::getSingleton('core/session')->getFormKey() ?>" />
                 <h2 class="legend"><?php echo $this->__('Personal Information') ?></h2>
                 <ul class="form-list">
                     <li class="fields">
    
    
  • alternatively, delete template/customer/form/register.phtml or template/persistent/customer/form/register.phtml from your theme, in such case defaults from base theme will be used

Posted in: Troubleshooting

51 votes, 4.98 avg. rating (99% score)