# Form ACTION URL contains /index.php causing a 403

**URL:** https://forum.mautic.org/t/form-action-url-contains-index-php-causing-a-403/5151
**Category:** Product Support
**Created:** [September 1, 2016, 2:23pm UTC](https://forum.mautic.org/t/form-action-url-contains-index-php-causing-a-403/5151 "2016-09-01T14:23:20Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![marckell](https://avatars.discourse-cdn.com/v4/letter/m/4da419/32.png) [@marckell](https://forum.mautic.org/u/marckell)
#### Post date: [September 1, 2016, 2:23pm UTC](https://forum.mautic.org/t/form-action-url-contains-index-php-causing-a-403/5151/1 "2016-09-01T14:23:20Z")

</div>

I recently upgraded from 1.4.1 to 2.1.1.  
  
  
  
My previously working embedded forms no longer worked. I was getting a 403 error.  
  
  
  
Looking in the browser console, I noticed that they were being redirected as a POST to a GET using a 301 redirect. Since a GET is not allowed for the form submission, it resulted in a 403.  
  
  
  
I looked at the cut-and-paste code recommended in Mautic for the form, and it included:

\<form autocomplete="false" role="form" method="post" action="https://myhost.com/index.php/form/submit?formId=8" ...  
  
Since none of my other pages use the "/index.php" portion in the URL, I changed it to:  
  
\<form autocomplete="false" role="form" method="post" action="https://myhost.com/form/submit?formId=8"  
  
Now the form is working again.  
  
I created a new form after the upgrade, and the URL does not contain the "/index.php" portion. I guess the cut-and-paste code must get saved somewhere with the form configuration from the previous version of Mautic, so it still shows the previous version of the URL.

---

<div class="post-metadata">

### Author: ![marckell](https://avatars.discourse-cdn.com/v4/letter/m/4da419/32.png) [@marckell](https://forum.mautic.org/u/marckell)
#### Post date: [September 1, 2016, 2:23pm UTC](https://forum.mautic.org/t/form-action-url-contains-index-php-causing-a-403/5151/2 "2016-09-01T14:23:20Z")

</div>

I recently upgraded from 1.4.1 to 2.1.1.

My previously working embedded forms no longer worked. I was getting a 403 error.

Looking in the browser console, I noticed that they were being redirected as a POST to a GET using a 301 redirect. Since a GET is not allowed for the form submission, it resulted in a 403.

I looked at the cut-and-paste code recommended in Mautic for the form, and it included:

 \<form autocomplete="false" role="form" method="post" action="https://myhost.com/index.php/form/submit?formId=8" ...

Since none of my other pages use the “/index.php” portion in the URL, I changed it to:

 \<form autocomplete="false" role="form" method="post" action="https://myhost.com/form/submit?formId=8" 

Now the form is working again.

I created a new form after the upgrade, and the URL does not contain the “/index.php” portion. I guess the cut-and-paste code must get saved somewhere with the form configuration from the previous version of Mautic, so it still shows the previous version of the URL.