Invalid CSRF Token __CSRFToken__

Invalid CSRF Token CSRFToken

SantoshB

In the system logs, I have noticed warnings related to Invalid CSRF TokenE.g.Invalid CSRF Token __CSRFToken__Invalid CSRF token on http://domain.com/support/scp/ajax.php/draft/44765What are these warnings? how do I fix these? or is it safe to ignore these warnings? Here's my installation detailsServer InformationosTicket Versionv1.9.12 (19292ad) Web Server SoftwareApache/2.2.22 (Ubuntu)MySQL Version5.5.37PHP Version5.3.10-1ubuntu3.11

mfelber

My understanding is that this is a security mechanism: https://en.wikipedia.org/wiki/Cross-site_request_forgeryIt tries to make it harder for an attacker to abuse your browser session. But this messages could also be "normal" depending on your browser user behavior. This unwanted access attempt would be blocked and logged in the system log of osticket.My experience is that most of these "errors" are false alarms.

SantoshB

Thanks mfelber. That makes sense :)