A place to report and discuss bugs - please mention CMSimple-version, server, platform and browser version
-
cmb
- Posts: 14227
- Joined: Tue Jun 21, 2011 11:04 am
- Location: Bingen, RLP, DE
-
Contact:
Post
by cmb » Thu Sep 25, 2014 6:43 pm
Hello Community,
I've just noticed two regression bugs related to the page data tabs that have been introduced in CMSimple_XH 1.6.3:
- For some plugins it is not possible to save the page data at all; the following warning is emitted:
Invalid CSRF token!XH-ERROR: Invalid CSRF token!
C:\xampp\htdocs\xh163\cmsimple\classes\CSRFProtection.php:110
- The current CSRF token is stored in the page data (field name xh_csrf_token).
Both bugs are easy to fix, however, cleaning up the page data might be a bit harder. Anyhow, while the latter bug is more a small annoyance, the former bug is actually severe. We should consider to release XH 1.6.4 as
bug fix only release on the weekend.
Christoph
-
svasti
- Posts: 1660
- Joined: Wed Dec 17, 2008 5:08 pm
Post
by svasti » Thu Sep 25, 2014 7:09 pm
cmb wrote:We should consider to release XH 1.6.4 as bug fix only release on the weekend.
...ok
-
cmb
- Posts: 14227
- Joined: Tue Jun 21, 2011 11:04 am
- Location: Bingen, RLP, DE
-
Contact:
Post
by cmb » Thu Sep 25, 2014 8:32 pm
I have fixed both bugs (r1391+r1392). After reconsideration, I think fixing the page data could be left for the users: Settings -> Page Data is easy to use. I would add an respective note to the release announcement.
-
jojorun
- Posts: 50
- Joined: Sat Feb 14, 2009 2:41 pm
Post
by jojorun » Sun Sep 28, 2014 9:14 pm
Hi,
now I have this problem on one of my websites.
If I try to save the newe content this errormessage apears:
"Invalid CSRF token!XH-ERROR: Invalid CSRF token!
/var/www/htdocs/ksxxx/html/-host1/-cms/cmsimple/classes/CSRFProtection.php:110"
Clean page Data brings no change.
System-Info
Installierte CMSimple Version
CMSimple_XH 1.6.3 Released: 2014-09-21
Installierte Plugins
Advancedform
Filebrowser for CMSimple_XH 1.6.3
Hi_backup
Hi_updatecheck 1.2.1
Jquery 1.5.3
Meta_tags for CMSimple_XH 1.6.3
Pagemanager 2.0.3
Page_params for CMSimple_XH 1.6.3
Tinymce for CMSimple_XH 1.6.3
Utf8 0.5.5
How can I fix this?
Thanks in advance
-
cmb
- Posts: 14227
- Joined: Tue Jun 21, 2011 11:04 am
- Location: Bingen, RLP, DE
-
Contact:
Post
by cmb » Sun Sep 28, 2014 9:21 pm
jojorun wrote:If I try to save the newe content this errormessage apears:
"Invalid CSRF token!XH-ERROR: Invalid CSRF token!
/var/www/htdocs/ksxxx/html/-host1/-cms/cmsimple/classes/CSRFProtection.php:110"
If this message appears when you are saving the contents of a page data tab, then you have to wait for XH 1.6.4 (coming very soon).
If the message is the result of saving the contents of the editor, you should delete all cookies of the website (if in doubt, clear the browser cache completely). After logging in again, saving should work. If not, have a look at the system check ("Without BOM" should be OK). If that is okay, you should enable
debug mode, which most likely reports something like "Cannot modify header information - headers already sent".
-
ustalo
- Posts: 170
- Joined: Mon Aug 16, 2010 7:42 am
- Location: Russia
-
Contact:
Post
by ustalo » Thu Apr 02, 2015 8:14 am
1.6.6 I have the same problem Invalid CSRF token!
also manual
To activate debug mode you just have to rename this file (i.e. prepend an underscore to the name).
somebody could explain "rename this file"
what name should be? Or just any?
Aleksei
-
lck
- Posts: 3211
- Joined: Wed Mar 23, 2011 11:43 am
-
Contact:
Post
by lck » Thu Apr 02, 2015 9:12 am
Rename the file ./userfiles/downloads/XHdebug.txt to _XHdebug.txt (=Debug-Modus on)
-
Tata
- Posts: 3601
- Joined: Tue May 20, 2008 5:34 am
- Location: Slovakia
-
Contact:
Post
by Tata » Thu Sep 03, 2015 7:49 pm
I just try to built a website with CMSimple?XH 1.6.7 using Onepage_XH and have a very basic simple template. Also installed is felxslider_XH and twocents_XH. After first login and saving
Invalid CSRF token!XH-ERROR: Invalid CSRF token!
/www/c/m/u13296/public_html/_sub/esko/cmsimple/classes/CSRFProtection.php:112
is returned and no other action on the webpage is possible.
There are also 4 newsboxes in the template.
I tried comment out all functions step-by-step in the template. But nothing has helped.
Debug states
WARNING: fopen(./templates/mini1/template.htm): failed to open stream: No such file or directory
/www/c/m/u13296/public_html/_sub/esko/cmsimple/cms.php:1378
But the template does not exist. There is only my own template there.
Now I tried to delete all pages by page manager. This is the result
403 Forbidden
Invalid CSRF token!XH-ERROR: Invalid CSRF token!
/www/c/m/u13296/public_html/_sub/esko/cmsimple/classes/CSRFProtection.php:112
What's wrong?
CMSimple.sk
It's no shame to ask for an answer if all efforts failed.
But it's awful to ask without any effort to find the answer yourself.
-
cmb
- Posts: 14227
- Joined: Tue Jun 21, 2011 11:04 am
- Location: Bingen, RLP, DE
-
Contact:
Post
by cmb » Thu Sep 03, 2015 9:36 pm
Tata wrote:Debug states
WARNING: fopen(./templates/mini1/template.htm): failed to open stream: No such file or directory
/www/c/m/u13296/public_html/_sub/esko/cmsimple/cms.php:1378
But the template does not exist. There is only my own template there.
For some reason CMSimple_XH tries to use templates/mini1/template.htm as template. Did you change the configuration to point to your template?
-
Tata
- Posts: 3601
- Joined: Tue May 20, 2008 5:34 am
- Location: Slovakia
-
Contact:
Post
by Tata » Fri Sep 04, 2015 7:44 pm
Of course I did. But it has not been saved in config.php. Now I changed it in the file manually. And the page works. But why was it not saved trougn the admin functions?
CMSimple.sk
It's no shame to ask for an answer if all efforts failed.
But it's awful to ask without any effort to find the answer yourself.