Login looping after (hidden) frame redirct

msw

Hello support team,

I've already searched the internet for help and a solution, but I couldn't find anything.

The following problem: I cannot log in after a frame forwarding (hidden forwarding), so a login looping happens in the employee area /scp (permanently "login required"). If I run the ticket system directly at the host, it works.

Facts:
Ticket system is hosted here: mswticket.sebsey.de

But the call should be made via support.mswpartners.de.
This domain is registered with United Domains. Here I set up a forwarding to http://mswticket.sebsey.de as a frame forwarding (hidden forwarding) directly in the config portal. The forwarding also works, the configuration within the ticket system (allow iFrame http://support.mswpartners.de,support.mswpartners.de,mswpartners.de,mswpartners.de is stored in this way).

An open forwarding does not bring the login loop problems!

However, I would like the domain bar to continue to show support.mswpartners.de instead of mswticket.sebsey.de.
I've tried so many things and tried to read up on the internet, but I just can't do it. I will also post various screenshots of my configuration.

If I call up the ticket system via support.mswpartners.de and log in, I then get the login loop and the following error message in the ticket system:
Invalid CSRF token CSRFToken
Invalid CSRF token [07b275c689dd21636677151ddd35d038da230b53] at https://mswticket.sebsey.de:443/scp/login.php
Log Date: Thursday, February 3, 2022 11:04 am IP Address: 46.182.146.151

I assume there is the problem. I also tried to solve it with an .htaccess, but I am not familiar with it.

And now here is my desperate request: how do I solve the problem? Which screw do I have to turn?
I would be very happy about a timely reaction! I will hand out a case of beer (via e.g. PayPal) for help and solution! Your help is very appreciated!

Best,
Sebastian

INFORMATION:
Serverinformationen
osTicket-Version osTicket PLUS v1.15.4 (6bd7884) Patch-2 — Deutsche Version — Aktuell
Server-Software Apache
MySQL-Version 5.7.33
PHP-Version 7.4.22

ramrajone

msw
Hi You are not using the official version of osTicket, the errors were in the official version of osTicket 1.10.4

error: Valid CSRF Token Required
solution: edit include/class.ostsession.php line around 191

catch (DoesNotExist $e) {
$this->data = new SessionData([‘session_id’ => $id]);

$this->data->session_data = “”;
https://howtohelpdesk.com/how-to-upgrade-osticket-to-1-10-4/

msw

ramrajone Thank you for the very fast answer! You just gave me some hope, but it didnt work. I am not familiar with php editing, so I might just did it wrong. I added a screenshot of the class.ostsession.php

There are some other corrections in it which came by the german version, I am not sure, if they lead to this problem as well?

THANKS FOR YOUR HELP!
Seb

msw

I removed the +, so the extra line is only:

$this->data->session_data = "";

didnt solve my issue!

ramrajone

msw
did that fix your issue?

msw

It did not fix my issue! :-(

Will Provide a Video shortly.

Have u read thats It only happens when using the redirect link?

Does NOT work from here: support.mswpartners.de
From here It works: mswticket.sebsey.de

support.mswpartners.de redirect to mswticket.sebsey.de

:-( any ideas? This is driving me crazy

msw

please see my post above.
Also I am providing a video with my problem, maybe it was not easy to understand what issue I am facing.

http://sebsey.de/probticket.mp4

Thank you for your help!!!

msw

I just installed the original US Version from this site and experiencing the SAME problem.

Its hosted here: ustickets.sebsey.de (works to login)
Start from: ustickets.mswpartners.de (does not work to login)

PLEASE HELP!! :-(

msw

I changed the hosting to the same from the domain. this solved my problem.
this thread can be closed!
Thank you for your help :-)