FIX – Customer cannot login to magento 1.8.1

Following an upgrade to magento 1.8.1 on our development servers , we noticed that customers are unable to login to their account.

The issue is raising because the custom login form does not contain any form_key and there is a form key validation happening in loginPostAction of magento.

Here is the solution:

1 – Go to template/customer/form/login.phtml and template/persistent/customer/form/login.phtml and under

<ul class="form-list">

add the following code in the login form

 <input type="hidden" name="form_key" value="<?php echo Mage::getSingleton('core/session')->getFormKey(); ?>" />

If you are using the login form in different templates then you use add the form_key to the other parts as well.

I hope this helps.

EDIT:

- We are aware that this issue also exists while updating the qty of cart items, the same solution applies there.

- Previously there was two methods in this blog to fix the problem but editing core files goes against Magento development standards hence that has now been removed.

By
About the author: "Dave is a content marketing specialist within the SEO team at Blueclaw. He comes from a technical SEO and link building background and has worked both in-house and agency side in a wide variety of industries."
View all posts by David Hellowell