Answers.Body: <p>It's not 100% but you can identify submissions that are local origin by referer in the web logs.</p>
  
  <p>Additionally, any POST that is not from an external form will have a preceding GET for the same form path, while a POST that is a profile submission from remote origin will not. Good opportunity to practice <a href="https://gregable.com/2010/09/why-you-should-know-just-little-awk.html" rel="nofollow noreferrer">a little awk</a> </p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2018-06-28T16:44:06.483Z
Answers.LastActivityDate: 2018-06-28T16:44:06.483Z
Answers.UserDisplayName: Jon G - Megaphone Tech
Body: <p>Remote profiles are difficult to configure safely, so they're turned off by default on modern CiviCRM installs.  However, if I have an old CiviCRM installation, how can I tell if this feature is in use before I turn it off?</p>
  
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2018-06-29T00:49:06.700Z
Comments.Text: Thx Jon - I was just commenting elsewhere that it is a shame that many suggestions and fixes discussed via Chat do not make it in to here.
Comments.UserDisplayName: petednz - fuzion
Tags: <profile><security><form-snippets><snippet>
Title: How can I tell if Remote Profiles are in use?
ThreadText: # How can I tell if Remote Profiles are in use?
  
  (Asked by: username_0 on 2018-06-28)
  
  Remote profiles are difficult to configure safely, so they're turned off by default on modern CiviCRM installs. However, if I have an old CiviCRM installation, how can I tell if this feature is in use before I turn it off?
  
  **Tags:** profile, security, form-snippets, snippet
  
  > **Comments:**
  > **username_1**: Thx Jon - I was just commenting elsewhere that it is a shame that many suggestions and fixes discussed via Chat do not make it in to here.  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_0 on 2018-06-28. Score: 3
  
  It's not 100% but you can identify submissions that are local origin by referer in the web logs.
  
  Additionally, any POST that is not from an external form will have a preceding GET for the same form path, while a POST that is a profile submission from remote origin will not. Good opportunity to practice [a little awk](https://gregable.com/2010/09/why-you-should-know-just-little-awk.html)
  
  
  ---
  
  