XH 1.6.3: Saving page data

A place to report and discuss bugs - please mention CMSimple-version, server, platform and browser version
cmb
Posts: 14225
Joined: Tue Jun 21, 2011 11:04 am
Location: Bingen, RLP, DE
Contact:

XH 1.6.3: Saving page data

Post by cmb » Thu Sep 25, 2014 6:43 pm

Hello Community,

I've just noticed two regression bugs related to the page data tabs that have been introduced in CMSimple_XH 1.6.3:
  • For some plugins it is not possible to save the page data at all; the following warning is emitted:
    Invalid CSRF token!XH-ERROR: Invalid CSRF token!
    C:\xampp\htdocs\xh163\cmsimple\classes\CSRFProtection.php:110
  • The current CSRF token is stored in the page data (field name xh_csrf_token).
Both bugs are easy to fix, however, cleaning up the page data might be a bit harder. Anyhow, while the latter bug is more a small annoyance, the former bug is actually severe. We should consider to release XH 1.6.4 as bug fix only release on the weekend.

Christoph
Christoph M. Becker – Plugins for CMSimple_XH

svasti
Posts: 1651
Joined: Wed Dec 17, 2008 5:08 pm

Re: XH 1.6.3: Saving page data

Post by svasti » Thu Sep 25, 2014 7:09 pm

cmb wrote:We should consider to release XH 1.6.4 as bug fix only release on the weekend.
:ugeek: ...ok

cmb
Posts: 14225
Joined: Tue Jun 21, 2011 11:04 am
Location: Bingen, RLP, DE
Contact:

Re: XH 1.6.3: Saving page data

Post by cmb » Thu Sep 25, 2014 8:32 pm

I have fixed both bugs (r1391+r1392). After reconsideration, I think fixing the page data could be left for the users: Settings -> Page Data is easy to use. I would add an respective note to the release announcement.
Christoph M. Becker – Plugins for CMSimple_XH

jojorun
Posts: 50
Joined: Sat Feb 14, 2009 2:41 pm

Re: XH 1.6.3: Saving page data

Post by jojorun » Sun Sep 28, 2014 9:14 pm

Hi,
now I have this problem on one of my websites.
If I try to save the newe content this errormessage apears:

"Invalid CSRF token!XH-ERROR: Invalid CSRF token!
/var/www/htdocs/ksxxx/html/-host1/-cms/cmsimple/classes/CSRFProtection.php:110"

Clean page Data brings no change.


System-Info

Installierte CMSimple Version

CMSimple_XH 1.6.3 Released: 2014-09-21

Installierte Plugins

Advancedform
Filebrowser for CMSimple_XH 1.6.3
Hi_backup
Hi_updatecheck 1.2.1
Jquery 1.5.3
Meta_tags for CMSimple_XH 1.6.3
Pagemanager 2.0.3
Page_params for CMSimple_XH 1.6.3
Tinymce for CMSimple_XH 1.6.3
Utf8 0.5.5

How can I fix this?
Thanks in advance

cmb
Posts: 14225
Joined: Tue Jun 21, 2011 11:04 am
Location: Bingen, RLP, DE
Contact:

Re: XH 1.6.3: Saving page data

Post by cmb » Sun Sep 28, 2014 9:21 pm

jojorun wrote:If I try to save the newe content this errormessage apears:

"Invalid CSRF token!XH-ERROR: Invalid CSRF token!
/var/www/htdocs/ksxxx/html/-host1/-cms/cmsimple/classes/CSRFProtection.php:110"
If this message appears when you are saving the contents of a page data tab, then you have to wait for XH 1.6.4 (coming very soon).

If the message is the result of saving the contents of the editor, you should delete all cookies of the website (if in doubt, clear the browser cache completely). After logging in again, saving should work. If not, have a look at the system check ("Without BOM" should be OK). If that is okay, you should enable debug mode, which most likely reports something like "Cannot modify header information - headers already sent".
Christoph M. Becker – Plugins for CMSimple_XH

ustalo
Posts: 164
Joined: Mon Aug 16, 2010 7:42 am
Location: Russia
Contact:

Re: XH 1.6.3: Saving page data

Post by ustalo » Thu Apr 02, 2015 8:14 am

1.6.6 I have the same problem Invalid CSRF token!
also manual

To activate debug mode you just have to rename this file (i.e. prepend an underscore to the name).

somebody could explain "rename this file"
what name should be? Or just any?
Aleksei

lck
Posts: 2955
Joined: Wed Mar 23, 2011 11:43 am
Contact:

Re: XH 1.6.3: Saving page data

Post by lck » Thu Apr 02, 2015 9:12 am

Rename the file ./userfiles/downloads/XHdebug.txt to _XHdebug.txt (=Debug-Modus on)
„Bevor du den Pfeil der Wahrheit abschießt, tauche die Spitze in Honig!“   👉 Ludwig's XH-Templates for MultiPage & OnePage

Tata
Posts: 3586
Joined: Tue May 20, 2008 5:34 am
Location: Slovakia
Contact:

Re: XH 1.6.3: Saving page data

Post by Tata » Thu Sep 03, 2015 7:49 pm

I just try to built a website with CMSimple?XH 1.6.7 using Onepage_XH and have a very basic simple template. Also installed is felxslider_XH and twocents_XH. After first login and saving

Invalid CSRF token!XH-ERROR: Invalid CSRF token!
/www/c/m/u13296/public_html/_sub/esko/cmsimple/classes/CSRFProtection.php:112

is returned and no other action on the webpage is possible.
There are also 4 newsboxes in the template.
I tried comment out all functions step-by-step in the template. But nothing has helped.
Debug states


WARNING: fopen(./templates/mini1/template.htm): failed to open stream: No such file or directory
/www/c/m/u13296/public_html/_sub/esko/cmsimple/cms.php:1378


But the template does not exist. There is only my own template there.

Now I tried to delete all pages by page manager. This is the result

403 Forbidden
Invalid CSRF token!XH-ERROR: Invalid CSRF token!
/www/c/m/u13296/public_html/_sub/esko/cmsimple/classes/CSRFProtection.php:112

What's wrong?
CMSimple.sk
It's no shame to ask for an answer if all efforts failed.
But it's awful to ask without any effort to find the answer yourself.

cmb
Posts: 14225
Joined: Tue Jun 21, 2011 11:04 am
Location: Bingen, RLP, DE
Contact:

Re: XH 1.6.3: Saving page data

Post by cmb » Thu Sep 03, 2015 9:36 pm

Tata wrote:Debug states


WARNING: fopen(./templates/mini1/template.htm): failed to open stream: No such file or directory
/www/c/m/u13296/public_html/_sub/esko/cmsimple/cms.php:1378


But the template does not exist. There is only my own template there.
For some reason CMSimple_XH tries to use templates/mini1/template.htm as template. Did you change the configuration to point to your template?
Christoph M. Becker – Plugins for CMSimple_XH

Tata
Posts: 3586
Joined: Tue May 20, 2008 5:34 am
Location: Slovakia
Contact:

Re: XH 1.6.3: Saving page data

Post by Tata » Fri Sep 04, 2015 7:44 pm

Of course I did. But it has not been saved in config.php. Now I changed it in the file manually. And the page works. But why was it not saved trougn the admin functions?
CMSimple.sk
It's no shame to ask for an answer if all efforts failed.
But it's awful to ask without any effort to find the answer yourself.

Post Reply