Answers.Body: <p>I have the similar problem with the "thank you" page for donations. It started to displayed the same message instead of "thank you" page. We noticed, that URL is not correct: problem is caused by "&amp;amp" string in URL. When it is replaced with just &amp;, it works fine and "thank you" page is displayed correctly.</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-03-11T23:10:55.987Z
Answers.LastActivityDate: 2019-03-11T23:10:55.987Z
Answers.UserDisplayName: Piotr Dybiec
Body: <p>Version: CiviCRM 5.10.3</p>
  
  <p>Type: Bug</p>
  
  <p>CMS: WordPress</p>
  
  <p>With the update to CiviCRM 5.10.3, I noticed the form action URL in the HTML Form Snippet generated for Remote Profile submissions has changed, breaking the form submission functionality for anonymous users with all newly generated HTML Form Snippets.</p>
  
  <p><strong><em>This is the first time I have noticed this bug, which was definitely introduced sometime after version CiviCRM 5.7.2, the last time I generated an HTML Form Snippet that was used with a Remote Profile.</em></strong></p>
  
  <p>Previously, the HTML Form Snippet generated code with a form action URL that posted to the "create profile" URL, allowing form submissions from anonymous users:</p>
  
  <pre><code>&lt;form  action="https://wpmaster.demo.civicrm.org/civicrm/?page=CiviCRM&amp;amp;q=civicrm%2Fprofile%2Fcreate" method="post" name="Edit" id="Edit" class="CRM_Profile_Form_Edit" &gt;
  </code></pre>
  
  <p>After the update, the code generated by the HTML Form Snippet includes a form action URL that posts to the default "admin group":</p>
  
  <pre><code>&lt;form  action="https://wpmaster.demo.civicrm.org/civicrm/?page=CiviCRM&amp;amp;q=civicrm%2Fadmin%2Fuf%2Fgroup" method="post" name="Edit" id="Edit" class="CRM_Profile_Form_Edit" &gt;
  </code></pre>
  
  <p>With the above form action URL, anonymous uses see the following error when the user clicks the "Submit" button:</p>
  
  <blockquote>
    <blockquote>
      <p>You do not have permission to access this content.</p>
    </blockquote>
  </blockquote>
  
  <p>Manually changing the code in the HTML Form Snippet to use a form action URL with the previous "create profile" version restores the functionality.</p>
  
  <p>This bug is specifically related to the generate HTML Form Snippet code as Profiles work properly for anonymous users when inserted using the "Add CiviCRM Public Pages" button within WordPress, which inserts the code that includes the correct "create profile" form action URL.</p>
  
  <p>I tested both WordPress and Drupal 7 demo sites and was able to replicate the bug with ONLY the WordPress demo site:</p>
  
  <p><a href="https://wpmaster.demo.civicrm.org/" rel="nofollow noreferrer">https://wpmaster.demo.civicrm.org/</a>
  <a href="https://dmaster.demo.civicrm.org/" rel="nofollow noreferrer">https://dmaster.demo.civicrm.org/</a></p>
  
  <hr>
  
  <p>Steps to Reproduce Bug with WordPress CiviCRM 5.10.3+:</p>
  
  <ol>
  <li>Login</li>
  <li>CiviCRM > Administer > System Settings > Misc (Undelete, PDFs, Limits, Logging, Captcha, etc.)</li>
  <li>For the "Accept profile submissions from external sites" option, select "Yes" and then click "Save"</li>
  <li>Administer > Custom Data and Screens > Profiles</li>
  <li>For any Profile, generate the code by clicking: more > HTML Form Snippet</li>
  <li>The code generated by the updated version includes a "post" action URL to the "admin group"</li>
  </ol>
  
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2019-03-03T02:22:17.127Z
Comments.Text: thank you so much for this, this is a huge help!
Comments.UserDisplayName: Alex D
Tags: <wordpress><profile><bug-reporting>
Title: Bug with WordPress CiviCRM 5.10.3 Remote Profiles HTML Form Snippet Form Action URL
ThreadText: # Bug with WordPress CiviCRM 5.10.3 Remote Profiles HTML Form Snippet Form Action URL
  
  (Asked by: username_0 on 2019-02-27)
  
  Version: CiviCRM 5.10.3
  Type: Bug
  CMS: WordPress
  With the update to CiviCRM 5.10.3, I noticed the form action URL in the HTML Form Snippet generated for Remote Profile submissions has changed, breaking the form submission functionality for anonymous users with all newly generated HTML Form Snippets.
  This is the first time I have noticed this bug, which was definitely introduced sometime after version CiviCRM 5.7.2, the last time I generated an HTML Form Snippet that was used with a Remote Profile.
  Previously, the HTML Form Snippet generated code with a form action URL that posted to the "create profile" URL, allowing form submissions from anonymous users:
  
  
  After the update, the code generated by the HTML Form Snippet includes a form action URL that posts to the default "admin group":
  
  
  With the above form action URL, anonymous uses see the following error when the user clicks the "Submit" button:
  
  
  You do not have permission to access this content.
  
  
  Manually changing the code in the HTML Form Snippet to use a form action URL with the previous "create profile" version restores the functionality.
  This bug is specifically related to the generate HTML Form Snippet code as Profiles work properly for anonymous users when inserted using the "Add CiviCRM Public Pages" button within WordPress, which inserts the code that includes the correct "create profile" form action URL.
  I tested both WordPress and Drupal 7 demo sites and was able to replicate the bug with ONLY the WordPress demo site:
  https://wpmaster.demo.civicrm.org/
  https://dmaster.demo.civicrm.org/
  
  Steps to Reproduce Bug with WordPress CiviCRM 5.10.3+:
  
  Login
  CiviCRM > Administer > System Settings > Misc (Undelete, PDFs, Limits, Logging, Captcha, etc.)
  For the "Accept profile submissions from external sites" option, select "Yes" and then click "Save"
  Administer > Custom Data and Screens > Profiles
  For any Profile, generate the code by clicking: more > HTML Form Snippet
  The code generated by the updated version includes a "post" action URL to the "admin group"
  
  **Tags:** wordpress, profile, bug-reporting
  
  > **Comments:**
  > **username_1**: thank you so much for this, this is a huge help!  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_2 on 2019-03-11. Score: 1
  
  I have the similar problem with the "thank you" page for donations. It started to displayed the same message instead of "thank you" page. We noticed, that URL is not correct: problem is caused by "&" string in URL. When it is replaced with just &, it works fine and "thank you" page is displayed correctly.
  
  
  ---
  
  