Invalid CSRF Token error and possibly mod_security? Related?

farmeunit

Upgraded to 1.18.4 a few weeks ago, but haven't tried uploading images until today. Was on 1.18.1 and "think" it was working then, but not sure last time we used inline images.

I was initially getting another error, but used this thread to (https://forum.osticket.com/d/108072-1184-invalid-csrf-token-when-attaching-image/2) edit js/redactor-osticket.js.

That did fix that error. Now I'm get invalid CSRF Token, but only when editing the Knowledgebase, as far as I can tell so far.

As soon as I open the article, I get the 404 error in Developer Tools in Chrome. Once I click on the Edit button, I get another.

When I go to add a picture I get:
quest URL
https://domain.com/scp/ajax.php/draft/3398/attach
Request Method
POST
Status Code
403 Forbidden
Remote Address
xxx.xxx.xxx.xxx:443
Referrer Policy
strict-origin-when-cross-origin

When I try to add picture, it also says: Unable to save draft. Refresh the current page to restore and continue your draft.

That is when I get the above error.

KevinTheJedi

farmeunit

I see you've already applied this. Did you restart the browser and/or cleared all cache/cookies/sessions for the site? When you get 403 Forbidden that typically means webserver blocking it for some reason. I would look at your webserver error logs to see if there is a specific reason (usually something like ModSecurity: Access denied, etc.). Maybe even check the journalctl to see if it is showing anything. I would even check file permissions/ownership too since you said you upgraded.

Cheers.

farmeunit

KevinTheJedi

I didn't restart the browser, but did restart Apache, FPM, and cleared all time cache in Chrome. Also tried Firefox and cleared cache there. Will look at the logs and see if I can find anything. I have ticket in with Inmotion Hosting.

KevinTheJedi

farmeunit

Ah, then they likely have a firewall or something blocking those requests. I’ve seen that with other hosts with strict firewalls. They usually can add exceptions, etc. with no issues to get it back working.

Cheers.

farmeunit

Went through logs today and was going to reproduce the error, and now the image inserts just fine. Guess we can close this or mark as solved if that's possible.