I have problems with a user's access to osticket in Google Chrome and Firefox

eduardoexplod

Hello good day.

I have version 1.7 installed osTicket Multilanguage, throughout the facility and the creation of users, groups and departments, eh not had problems until set the "autocron" to retrieve emails and convert and tickets.

The problem appeared when I discharged two users in the application, create your user and then allocated their groups and departments by providing your Username and Password, they remember not failed in several attempts, after successfully writing the application in the browser control error "invalid __ CSRFToken__" now if they can access them but only from Internet Explorer, "Goggle Chrome" and Firefox, just do not let them access.

I was researching and one alternative is to delete the history and browser cookies, I did and the problem persists.

Hopefully you can help me ...

Grizly

I'm not familiar with "Autocron", I've actually commented it out of the page so it reduces the page-load, but I'm a little confused by what you mean by "discharged two users".. to me that means "removed" from the system. Can you clarify?

Perhaps changing the default logging to "Debug" mode then trying again, it might put something useful into the Admin logs, failling that, perhaps the Server's error-logs.

eduardoexplod

What I meant was that after you finish configuring and started to add users to the application, 2 of them had problems accessing sending a browser error like "CSRF invalid __ CSRFToken__" now when they try to access via Firefox or Chrome, they simply can not get in, but if they do it by internet explorer everything works correctly.

jccrofty30

We have had the same thing.

Thus far, the only guaranteed fix that I have come across is completely commenting out the entire CSRF system. This completely removes an entire level of security from the site.

FrancoisH

I encoutered the same issue accessing the admin panel with using the 1.7.1 RC, new installation.

After the login screen, I get "Invalid CSRF" error and I am unable to connect to the Admin Panel. It work like a charm with the 1.7 Stable. I tried with both Firefox and Chrome and both cause this issue.

I noticed as well the 1.7.1 take about 65 seconds to create the database on install, unlike the 1.7 which only use 5 seconds...

jccrofty30

I encoutered the same issue accessing the admin panel with using the 1.7.1 RC, new installation.
After the login screen, I get "Invalid CSRF" error and I am unable to connect to the Admin Panel. It work like a charm with the 1.7 Stable. I tried with both Firefox and Chrome and both cause this issue.
I noticed as well the 1.7.1 take about 65 seconds to create the database on install, unlike the 1.7 which only use 5 seconds...

We actually experienced the issue with 1.7 ST. We upgraded to 1.7.1 because there were some bugfixes listed that we needed. The issue continued to happen. We just recently figured out, however, that some staff were using the links included in the emails instead of using /scp.

We removed the links from staff emails and, thus far, have not received reports involving the token issue. We only just made the switch today.

We think that, somehow, the emailed link was causing a fault in the token system.

If this continues to work I will post something about it.