# Focus Item Form Submit Same Origin Issue

**URL:** <https://forum.mautic.org/t/focus-item-form-submit-same-origin-issue/6148>\
**Category:** Product Support\
**Created:** [October 9, 2016, 4:06am UTC](https://forum.mautic.org/t/focus-item-form-submit-same-origin-issue/6148 "2016-10-09T04:06:20Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![trops](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/trops/32/3998_2.png) [@trops](https://forum.mautic.org/u/trops)\
**Post date:** [October 9, 2016, 4:06am UTC](https://forum.mautic.org/t/focus-item-form-submit-same-origin-issue/6148/1 "2016-10-09T04:06:20Z")

</div>

Im using a focus item and I have mautic installed on a subdomain.  
  
Im getting the following error when I submit the form…  
  
  
  
“Refused to display ‘[http://mautic.mydomain.com/mautic/form/submit?formId=2](http://mautic.mydomain.com/mautic/form/submit?formId=2)’ in a frame because it set ‘X-Frame-Options’ to ‘SAMEORIGIN’.”  
  
  
  
Is there another way I can get the form to submit in the time being?

---

<div class="post-metadata">

**Author:** ![trops](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/trops/32/3998_2.png) [@trops](https://forum.mautic.org/u/trops)\
**Post date:** [October 9, 2016, 4:06am UTC](https://forum.mautic.org/t/focus-item-form-submit-same-origin-issue/6148/2 "2016-10-09T04:06:20Z")

</div>

Im using a focus item and I have mautic installed on a subdomain.  
Im getting the following error when I submit the form…

“Refused to display ‘[http://mautic.mydomain.com/mautic/form/submit?formId=2](http://mautic.mydomain.com/mautic/form/submit?formId=2)’ in a frame because it set ‘X-Frame-Options’ to ‘SAMEORIGIN’.”

Is there another way I can get the form to submit in the time being?

---

<div class="post-metadata">

**Author:** ![chizuokagmail-com](https://avatars.discourse-cdn.com/v4/letter/c/ecccb3/32.png) [@chizuokagmail-com](https://forum.mautic.org/u/chizuokagmail-com)\
**Post date:** [October 17, 2016, 10:19am UTC](https://forum.mautic.org/t/focus-item-form-submit-same-origin-issue/6148/3 "2016-10-17T10:19:52Z")

</div>

i’ve got a similar issue

---

<div class="post-metadata">

**Author:** ![Elenchus](https://avatars.discourse-cdn.com/v4/letter/e/ccd318/32.png) [@Elenchus](https://forum.mautic.org/u/Elenchus)\
**Post date:** [October 17, 2016, 12:12pm UTC](https://forum.mautic.org/t/focus-item-form-submit-same-origin-issue/6148/4 "2016-10-17T12:12:27Z")

</div>

Not sure how to help, but it sounds like a CORS access control issue

---

<div class="post-metadata">

**Author:** ![nickbuc](https://avatars.discourse-cdn.com/v4/letter/n/e36b37/32.png) [@nickbuc](https://forum.mautic.org/u/nickbuc)\
**Post date:** [December 8, 2016, 4:19pm UTC](https://forum.mautic.org/t/focus-item-form-submit-same-origin-issue/6148/5 "2016-12-08T16:19:05Z")

</div>

I have the same issue. I changed the SAMEORIGIN to Allow the site URL in http.conf but this is not resolving the problem. Any suggestion would be great!

---

<div class="post-metadata">

**Author:** ![DerekBuntin](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/derekbuntin/32/90_2.png) [@DerekBuntin](https://forum.mautic.org/u/DerekBuntin)\
**Post date:** [January 1, 2017, 9:38am UTC](https://forum.mautic.org/t/focus-item-form-submit-same-origin-issue/6148/6 "2017-01-01T09:38:29Z")

</div>

I’ve been trying to debug this all morning, it doesn’t seem to matter what CORS settings you apply in the config, it just doesn’t seem to work.

---

<div class="post-metadata">

**Author:** ![tfoulkes](https://avatars.discourse-cdn.com/v4/letter/t/dfb087/32.png) [@tfoulkes](https://forum.mautic.org/u/tfoulkes)\
**Post date:** [March 7, 2017, 3:26pm UTC](https://forum.mautic.org/t/focus-item-form-submit-same-origin-issue/6148/7 "2017-03-07T15:26:47Z")

</div>

Any help on this would be great. I have been working on this issue for a couple hours now and can’t figure it out.

---

<div class="post-metadata">

**Author:** ![DerekBuntin](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/derekbuntin/32/90_2.png) [@DerekBuntin](https://forum.mautic.org/u/DerekBuntin)\
**Post date:** [March 7, 2017, 3:44pm UTC](https://forum.mautic.org/t/focus-item-form-submit-same-origin-issue/6148/8 "2017-03-07T15:44:35Z")

</div>

Make sure in your admin config settings you have CORS set to ‘Yes’ and that you have only one url defined, which may be your full domain name ‘[https://www.yourdomain.com](https://www.yourdomain.com)’.

---

<div class="post-metadata">

**Author:** ![tdlabs](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/tdlabs/32/166_2.png) [@tdlabs](https://forum.mautic.org/u/tdlabs)\
**Post date:** [March 10, 2017, 6:59pm UTC](https://forum.mautic.org/t/focus-item-form-submit-same-origin-issue/6148/9 "2017-03-10T18:59:44Z")

</div>

@DerekBuntin I have the same issue, adding the domain name in there makes no difference to the forms, just the javascript tracking as far as I could tell.  
It is still reported as SAMEORIGIN, no matter what I set in the CORS settings on the config page.

---

<div class="post-metadata">

**Author:** ![DerekBuntin](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/derekbuntin/32/90_2.png) [@DerekBuntin](https://forum.mautic.org/u/DerekBuntin)\
**Post date:** [March 10, 2017, 7:11pm UTC](https://forum.mautic.org/t/focus-item-form-submit-same-origin-issue/6148/10 "2017-03-10T19:11:14Z")

</div>

@tdlabs what’s your website url?

---

<div class="post-metadata">

**Author:** ![tdlabs](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/tdlabs/32/166_2.png) [@tdlabs](https://forum.mautic.org/u/tdlabs)\
**Post date:** [March 10, 2017, 7:20pm UTC](https://forum.mautic.org/t/focus-item-form-submit-same-origin-issue/6148/11 "2017-03-10T19:20:18Z")

</div>

Hi Derek,

Figured it out.  
The guys at bitnami set the header to sameorigin in the apache configuration.  
I changed that and it worked now.

---

<div class="post-metadata">

**Author:** ![DerekBuntin](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/derekbuntin/32/90_2.png) [@DerekBuntin](https://forum.mautic.org/u/DerekBuntin)\
**Post date:** [March 10, 2017, 8:02pm UTC](https://forum.mautic.org/t/focus-item-form-submit-same-origin-issue/6148/12 "2017-03-10T20:02:13Z")

</div>

Awesome, glad it’s sorted 😉

---

<div class="post-metadata">

**Author:** ![Alcides](https://avatars.discourse-cdn.com/v4/letter/a/b2d939/32.png) [@Alcides](https://forum.mautic.org/u/Alcides)\
**Post date:** [March 13, 2017, 10:07pm UTC](https://forum.mautic.org/t/focus-item-form-submit-same-origin-issue/6148/13 "2017-03-13T22:07:10Z")

</div>

[quote=21146:@tdlabs]Hi Derek,

Figured it out.  
The guys at bitnami set the header to sameorigin in the apache configuration.  
I changed that and it worked now.[/quote]  
Could you please share with us what was the Lines of code added into the Apache configuration filé?

---

<div class="post-metadata">

**Author:** ![tdlabs](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/tdlabs/32/166_2.png) [@tdlabs](https://forum.mautic.org/u/tdlabs)\
**Post date:** [March 13, 2017, 10:24pm UTC](https://forum.mautic.org/t/focus-item-form-submit-same-origin-issue/6148/14 "2017-03-13T22:24:55Z")

</div>

@Alcides Sure thing,

It’s in

```auto
/opt/bitnami/apache2/conf/httpd.conf
```

Not sure what line it’s on, but just use find (ctrl+W in nano) to find “SAMEORIGIN”

The modified code block looks like:

```auto
<IfModule headers_module>
    <IfVersion >= 2.4.7 >
        Header always setifempty X-Frame-Options GOFORIT
    </IfVersion>
    <IfVersion < 2.4.7 >
        Header always merge X-Frame-Options GOFORIT
    </IfVersion>
    RequestHeader unset Proxy
</IfModule>
```

If you know how to restrict it to one website in there, it would be really cool to know.
