43
I find it hard to believe, but that didn't fix everything.
I applied the workaround as stated above to my brand new XOOPS 2.0.14 installation. I put it into the first line of that function, although that function is different in this XOOPS version than in the version listed. So that should have disabled HTTP_REFERER checks altogether.
It let me continue to the administration module but I can't change any settings therein until I uncheck "disable referers" in my WebDeveloper plugin for Firefox.
I'm using Firefox 1.5.0.2 on CentOS 4.3 (equivalent of Fedora Core 3) and XOOPS on FC3.
So I guess maybe that workaround is partially obsolete now that XOOPS has changed? Basic public usability demands that this setting should be fully optional at installation time, and disabled by default with a warning and a link to the FAQ! Sorry I'm not a coder or I'd do it.