Cannot login (No _CSRFToken exists in session)

Hi Karls,

Please check out this thread about "Security Error: No _CSRFToken exists in session. Try reloading previous page." issue.

https://www.interactivetools.com/forum/forum-posts.php?postNum=2235000#post2235000

Please let me know if the solution from that thread resolves the issue you were having.

Thanks,

Hi Daryl,

Nothing worked from the suggested post. The problem is remain from Firefox that i use as developing browser. Chrome is working...

I downgraded the cmsb to 2.63 but the problem is the same...

Karls

Hi Karls,

I can't replicate the issue on my local server, can you please send in a Support Request with the log in details, the cms admin url(don't post them here), and what version your Firefox is so we can take a closer look?

https://www.interactivetools.com/support/email_support_form.php?priority=free

Include a link to this forum post for reference.

Thanks,

Hi Daryl,

Thanks for your follow up.
I continued to searched about the problem and moved to downgrade on more version down (2.53) and the error message disappeared but still not able to log in.

Finally i "refreshed" (factory cleanup) my Firefox from troubleshooting and my problem resolved.
It was definitely something in the browser only.

Thanks again,
Karls

Hi Karls,

If you'd like I can upgrade the CMS for you and test and resolve any issues.  Just email me CMS and FTP login details to dave@interactivetools.com (don't post login details to the forum).

My guesses as to the cause are perhaps that a file didn't get uploaded during the upgrade (happens with FTP servers/clients occasionally) or there's a plugin that is interfering with the login process.  But I'm really not sure, we'd have to investigate.

Let me know, thanks!.

Hi Dave,

The problem occurs mainly when a record is saved.
But, it is always very random

I have just applied this solution:

update /lib/database_functions.php and replace all instances of this:

session_write_close()

with this:

#session_write_close()

http://www.interactivetools.com/forum/forum-posts.php?postNum=2235780#post2235780

Thanks!

Djulia

I use this on record_presave :

function _antiFlood($tableName, $isNewRecord, $oldRecord) {
    if(@$_SESSION['last_session_request'] > time() - 1) {
        die('Thanks to wait a second!');
    }
    $_SESSION['last_session_request'] = time();
}

Do you think that can interfere?

Thanks!

Djulia

Oops, I make an error on the post.

The error message is: "Security Error: Invalid _CSRFToken."

No : Cannot login (No _CSRFToken...

Sorry!