Radicore Forum: Framework » CSRF check failed

Home » RADICORE development » Framework » CSRF check failed (CAN´T EXECUTE MULTI4 TRANSACTION)

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

CSRF check failed [message #7144]

Mon, 28 May 2018 12:46

edortizq
Messages: 82
Registered: August 2008
Location: Ecuador

Member

I have a Multi4 transaction, when I change a child field and then press submit+next button (directly) then radicore returns to login screen with a CSRF check failed message.
You can see an image attached.

Attachment: RADICORE CSRF ERROR.pdf
(Size: 159.77KB, Downloaded 622 times)

Report message to a moderator

Re: CSRF check failed [message #7146 is a reply to message #7144]

Tue, 29 May 2018 04:44

AJM
Messages: 2368
Registered: April 2006
Location: Surrey, UK

Senior Member

Which version are you using? I cannot reproduce this problem with 2.09.0

Tony Marston
http://www.tonymarston.net
http://www.radicore.org

Report message to a moderator

Re: CSRF check failed [message #7183 is a reply to message #7146]

Mon, 30 July 2018 09:34

edortizq
Messages: 82
Registered: August 2008
Location: Ecuador

Member

Hi Tony, it seemed the problem was solved by itself, but now it has come again, when it is supossed the message should appear?

Attachment: CSRF radicore.JPG
(Size: 87.36KB, Downloaded 1244 times)

Report message to a moderator

Re: CSRF check failed [message #7184 is a reply to message #7183]

Tue, 31 July 2018 05:09

AJM
Messages: 2368
Registered: April 2006
Location: Surrey, UK

Senior Member

I have two MULTI4 tasks in the Dictionary subsystem - Update Child Relationship and Update Parent Relationship - and both of these work OK, so I cannot reproduce your problem.

I am just about to upload the next release, version 2.10.0, so you might want to try that.

Tony Marston
http://www.tonymarston.net
http://www.radicore.org

Report message to a moderator

Re: CSRF check failed [message #7186 is a reply to message #7184]

Tue, 31 July 2018 19:31

edortizq
Messages: 82
Registered: August 2008
Location: Ecuador

Member

Thanks for your answer, I'd like to know under which circunstances Radicore returns to the login screen with the "CSRF check failed" message? could you please help me with this issue?

Report message to a moderator

Re: CSRF check failed [message #7187 is a reply to message #7186]

Wed, 01 August 2018 04:30

AJM
Messages: 2368
Registered: April 2006
Location: Surrey, UK

Senior Member

The CSRF values are created in include.xml.php5.inc when the HTML output is generated. See lines 1026, 1964 and 2002.

These values are verified in include.session.inc during the initsession() processing. See lines 969 and 1024. A new value is also generated in the scriptNext() function at line 2685 and the scriptPrevious() function at line 2856.

Tony Marston
http://www.tonymarston.net
http://www.radicore.org

Report message to a moderator

Re: CSRF check failed [message #7189 is a reply to message #7187]

Wed, 01 August 2018 21:50

edortizq
Messages: 82
Registered: August 2008
Location: Ecuador

Member

Thanks!

Report message to a moderator

Re: CSRF check failed [message #7190 is a reply to message #7187]

Thu, 02 August 2018 16:52

edortizq
Messages: 82
Registered: August 2008
Location: Ecuador

Member

I have commented the code about CSRF and it seems to be right by now.
It seems there is a bug when execute scriptNext() function, analyzing my code the errors appears with this lines:

if (isset($_POST['submitnext']) || isset($_POST['submitstay'])) {
$_SESSION['idcliente'] = $rowdata['idcliente'];
$next['task_id'] = 'buzz_venta(add4)';
append2ScriptSequence($next);
}

and ....

if ($GLOBALS['task_id'] == 'buzz_venta(add2)' || $GLOBALS['task_id'] == 'buzz_venta(add4)'){
$idventa = $rowdata['idventa'];
$_SESSION['idventa'] = $rowdata['idventa'];
$next['task_id'] = 'buzz_detalleventa(multi4)';
append2ScriptSequence($next);
}

Report message to a moderator

Re: CSRF check failed [message #7191 is a reply to message #7190]

Fri, 03 August 2018 04:27

AJM
Messages: 2368
Registered: April 2006
Location: Surrey, UK

Senior Member

When is the scriptNext() function being used in that task? All you said in your initial error report is that you filled in the form and pressed a SUBMIT button, but this does not use scriptNext(), only scriptPrevious().

Tony Marston
http://www.tonymarston.net
http://www.radicore.org

Report message to a moderator

Re: CSRF check failed [message #7192 is a reply to message #7191]

Mon, 06 August 2018 12:14

AJM
Messages: 2368
Registered: April 2006
Location: Surrey, UK

Senior Member

I have tried putting in a call to append2ScriptSequence() in one of my MULTI4 tasks, and it works exactly as it should. I cannot reproduce this error.

Tony Marston
http://www.tonymarston.net
http://www.radicore.org

Report message to a moderator

Previous Topic:	Empty Folder name anomaly
Next Topic:	PDF - images in body / underlining 'label'

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

] [

]

Current Time: Sat Nov 23 09:24:57 EST 2024

Total time taken to generate the page: 0.01227 seconds