Valid CSRF Token Required after 1.7.1 install

jcuenin

Hi,

I just tried to install os ticket 1.7.1 rc1 but the first time i wanted to connect to the admin area i had this error message :

Valid CSRF Token Required

Any idea where this is coming from and what i can do about it?

I am in local using easyphp.

ntozier

1.7.1ST is out. You might try that instead of the release candidate.

jcuenin

Sorty i meant to say the last version from the website , so i guess its 1.7.1 ST

atut

it is the same... I cant login to Control Panel...

"Valid CSRF Token Required"

Please help, or please tell me where to download the previous stable version 1.7.0, what is the url link?

jared@osticket.com

Would you mind providing me access to your server or sending me the URL for your install via PM? We keep hearing rumors of this bug but have failed miserably to reproduce it on any of our equipment.

atut

Would you mind providing me access to your server or sending me the URL for your install via PM? We keep hearing rumors of this bug but have failed miserably to reproduce it on any of our equipment.

Yes, I can't login, after login with username and password it shows "Valid CSRF Token Required"

Sorry, I can't provide you access to my server because I am running on local webserver within VMWare (I do the test before implement it).

Windows XP Professional SP3

XAMPP latest version

Firefox latest version

Chrome latest version

Please help.

ger664

workaround

Happening to me as well. I was using http://localhost/support(http://localhost/support)

Got in with chrome when I used http://192.168.1.1/support(http://192.168.1.1/support) instead

jared@osticket.com

Thanks guys. Everyone who has reported the issue thus far has reported it for the 'localhost' address

atut

Happening to me as well. I was using http://localhost/support(http://localhost/support)
Got in with chrome when I used http://192.168.1.1/support(http://192.168.1.1/support) instead

Do you mean you were able to login sucessfully when you used Chrome and http:///support?

Thanks guys. Everyone who has reported the issue thus far has reported it for the 'localhost' address

Yes, I got the error when I used http://127.0.0.1(http://127.0.0.1)

So do you mean we must not use http://localhost(http://localhost) or http://127.0.0.1(http://127.0.0.1), but we should use http://?

jared@osticket.com

I finally have been able to reproduce and solve the problem. I have a fix posted here https://github.com/osTicket/osTicket-1.7/pull/707(https://github.com/osTicket/osTicket-1.7/pull/707). I'll roll yet another download zipfile today for the osticket.com site

jared@osticket.com

The download available on the osticket.com site for 1.7.1 includes the fix for this issue. Thanks for raising it and helping fix it.

atut

I finally have been able to reproduce and solve the problem. I have a fix posted here https://github.com/osTicket/osTicket-1.7/pull/707(https://github.com/osTicket/osTicket-1.7/pull/707). I'll roll yet another download zipfile today for the osticket.com site

Sorry, I don't get it. So what should I do now to be able to login?

Download the zipfile? How do I download it?

ger664

Do you mean you were able to login sucessfully when you used Chrome and http:///support?
Yes, I got the error when I used http://127.0.0.1(http://127.0.0.1)
So do you mean we must not use http://localhost(http://localhost) or http://127.0.0.1(http://127.0.0.1), but we should use http://?

Use the ip address of your LAN Interface not Localhost ip 127.0.0.1

juiceman84

"Valid CSRF Token Required" from non-localhost IP

Hi osTicket Gurus,

I just completed a fresh install (re-install) of the osTicket software and I am still getting the dreaded "Valid CSRF Token Required". I have tried multiple browsers (IE9, firefox and chrome) and they all give me the same response when trying to access by its IP address (10.x.x.201). I have installed 1.7.1.1 on Ubuntu 12.04 and the installation was successful.

I will be more than happy to provide remote access (through SSLVPN) to the server if you want to see the problem occur. Please let me know if you need anything else from me to help troubleshoot this issue.

For your convenience, I am uploading a couple of screenshots to qualify the error.

Thanks!

Juiceman

[2013-09-07 15_14_51-Mozilla Firefox.zip](https://forum.osticket.com/assets/files/migrated/f/066314539576ea90e9aac7d1b728195.zip)

[2013-09-07 15_15_22-osTicket Installer.zip](https://forum.osticket.com/assets/files/migrated/0/9de9175f540a96bc47d1eb0e2905d38.zip)

sjswarts

Broken here too...

I had osTicket 1.7 running smoothly, updated just today to 1.7.1.1 and it came up with that brutal Valid CSRF Token required.

Things I've tried:

- Different browsers

- Clearing cache

- using http://mydomain.com.au/support/scp/upgrade.php(http://mydomain.com.au/support/scp/upgrade.php)

About to try:

- Copying over my backup files

This is quite a pain. Why can't osTicket have a upgrading system GUI based? That would be much much better. Auto backup of files as the upgrade process, could be brilliant. Every time I upgrade its like voodoo...

Help please...

paulroots08

Try This

When I was troubleshooting the said issue.

What I did is to go to my php.ini

Find the:

session.auto_start = 0 (default)

I changed it to = 1 then restart the web server.

After that I brought it back to

session.auto_start = 0 then restart the web server again.

Try it, it works for me!

LANworX

Upgrade from 1.6ST to 1.7.1.x

i had this error (Valid CSRF token required) too - for me works this:

upgrade from 1.6ST to 1.7.0

then upgrade from 1.7.0 to 1.7.1.2

and it works fine!

dasunsrule32

i had this error (Valid CSRF token required) too - for me works this:
upgrade from 1.6ST to 1.7.0
then upgrade from 1.7.0 to 1.7.1.2
and it works fine!

Confirmed, the Wiki needs updated to let admins know to upgrade from 1.6.x -> 1.7.0, then 1.7.1.x.