Invalid CSRF Token Timeout setting

stelaso · Dec 2, 2016

I'm running OST v1.9.8 on Windows Server 2012 R2.Just wonder why "Invalid CSRF Token" shows up fairly frequently. I read from https://github.com/osTicket/osTicket/issues/1020It says Timeout setting is by default 24 hours. SESSION_TTL to be 24 hours (86400 seconds)And i've checked the bootstrap.php in OST v1.9.8, it's also SESSION_TTL = 86400However, it seems to me that the timeout is far shorter than 24 hours.Anyone have similar experience please?

ntozier · Dec 2, 2016

You should upgrade to current and see if the problem goes away. If you are unwilling to upgrade to current then you should at least upgrade to the current version of the 1.9 tree. (1.9.15 as of this writing)