Welcome Guest, Not a member yet? Register   Sign In
Codeigniter 2.0 CSRF Problem
#1

[eluser]lennierb5[/eluser]
I had CSRF protection set to TRUE and ran into the following problem:

If my $config['base_url'] was set to something like "http://mydomain.com/myproject/" and I attempted to login / submit form data from the site http://www.mydomain.com/myproject/ it generates the error:

An Error Was Encountered
The action you have requested is not allowed.

The same thing happens if you try http://myip/myproject and try to submit data it seems like it must exactly match the hostname supplied in $config['base_url'].

Everything works fine if my hostname is exactly as supplied in the $config['base_url'].

Any ideas on how to fix this without turning off the CSRF protection?


Messages In This Thread
Codeigniter 2.0 CSRF Problem - by El Forum - 12-04-2010, 04:16 PM
Codeigniter 2.0 CSRF Problem - by El Forum - 12-04-2010, 05:19 PM
Codeigniter 2.0 CSRF Problem - by El Forum - 12-04-2010, 06:49 PM
Codeigniter 2.0 CSRF Problem - by El Forum - 12-05-2010, 07:30 AM
Codeigniter 2.0 CSRF Problem - by El Forum - 12-05-2010, 09:37 AM
Codeigniter 2.0 CSRF Problem - by El Forum - 12-05-2010, 10:31 AM
Codeigniter 2.0 CSRF Problem - by El Forum - 12-06-2010, 07:20 AM
Codeigniter 2.0 CSRF Problem - by El Forum - 12-06-2010, 11:25 AM



Theme © iAndrew 2016 - Forum software by © MyBB