Answers.Body: <p>I agree - that behaviour is not good.  I think there is an extension that changes that but I can't find it just now.  Maybe someone else can link to it.  That said, the handling of checksums has changed recently with the 'authx' extension which may offer new options for handling expired checksums.</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2022-07-29T03:02:23.380Z
Answers.Text: I am less sure that the default is that you get redirected to the home page, certainly this https://civicrm.stackexchange.com/questions/12138/can-an-expired-checksum-provide-any-warning-to-the-user-when-they-get-to-the-sit and other bits that google found, have folk complaining in a way that clearly means the user does stay on the intended page BUT i guess that would only be true if the profile/form was available to Anonymous, so maybe that is part of the issue. J?
Answers.UserDisplayName: petednz - fuzion
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2022-07-28T19:55:54.377Z
Answers.LastActivityDate: 2022-07-28T19:55:54.377Z
Answers.UserDisplayName: Aidan
Answers.Body: <p>An extension could solve your issue : <a href="https://civicrm.org/extensions/form-access-restrictions" rel="nofollow noreferrer">https://civicrm.org/extensions/form-access-restrictions</a></p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2022-12-30T09:35:21.340Z
Answers.LastActivityDate: 2022-12-30T09:35:21.340Z
Answers.UserDisplayName: Gdn
Body: <p>I have a profile page setup where users can view their own data and modify it if necessary.</p>
  <p>They get emailed a link to the page with a checksum token, so they do NOT have to login.</p>
  <p>The page works fine when the checksum is not expired.</p>
  <p>Under Administer &gt; System Settings &gt; Misc you can adjust the lifespan of the token (default is 7 days).</p>
  <p>Once the token expires, if the user clicks on the link, they are simply redirected to the home page of the site.</p>
  <p>This is terrible user experience as they are not going to know why they can not access their profile anymore.</p>
  <p>It would make a lot more sense that they stayed on the profile page they linked to, and then the profile page should generate an error saying something like &quot;Sorry your checksum token has expired. You will need to get a new one to access this page.&quot;</p>
  <p>This seems like basic functionality that should be included, or maybe I am just missing something?</p>
  
Tags: <wordpress><profile><forms>
Title: Expired token (checksum) simply redirects to main page instead of giving error
ThreadText: # Expired token (checksum) simply redirects to main page instead of giving error
  
  (Asked by: username_0 on 2022-07-28)
  
  I have a profile page setup where users can view their own data and modify it if necessary.
  
  They get emailed a link to the page with a checksum token, so they do NOT have to login.
  
  The page works fine when the checksum is not expired.
  
  Under Administer > System Settings > Misc you can adjust the lifespan of the token (default is 7 days).
  
  Once the token expires, if the user clicks on the link, they are simply redirected to the home page of the site.
  
  This is terrible user experience as they are not going to know why they can not access their profile anymore.
  
  It would make a lot more sense that they stayed on the profile page they linked to, and then the profile page should generate an error saying something like "Sorry your checksum token has expired. You will need to get a new one to access this page."
  
  This seems like basic functionality that should be included, or maybe I am just missing something?
  
  **Tags:** wordpress, profile, forms
  
  
  ---
  
  ## 2 answers
  
  ### Answer by username_1 on 2022-07-28. Score: 1
  
  I agree - that behaviour is not good. I think there is an extension that changes that but I can't find it just now. Maybe someone else can link to it. That said, the handling of checksums has changed recently with the 'authx' extension which may offer new options for handling expired checksums.
  
  > **Comments:**
  > **username_2**: I am less sure that the default is that you get redirected to the home page, certainly this https://civicrm.stackexchange.com/questions/12138/can-an-expired-checksum-provide-any-warning-to-the-user-when-they-get-to-the-sit and other bits that google found, have folk complaining in a way that clearly means the user does stay on the intended page BUT i guess that would only be true if the profile/form was available to Anonymous, so maybe that is part of the issue. J?  
  
  ---
  
  ### Answer by username_3 on 2022-12-30. Score: 0
  
  An extension could solve your issue : <https://civicrm.org/extensions/form-access-restrictions>
  
  
  ---
  
  