Welcome Guest, Not a member yet? Register   Sign In
CRSF
#1

When $config['csrf_protection'] = TRUE,
if I search the site via a search form, click on a search result and then clicks on the browser back button,
the browser says: "Webpage has expired"

$config['csrf_regenerate'] = FALSE !

if I set $config['csrf_protection'] to TRUE it solves the problem, but obviously this is not a good idea...
Reply
#2

how did you create the form? with form_open()?
Reply
#3

how solve it still show on page view source.....
Reply
#4

(07-27-2015, 01:54 AM)Avenirer Wrote: how did you create the form? with form_open()?

Yes
Reply
#5

Set csrf_regenerate to false otherwise the token stored in your page will be invalid when they click back. http://security.stackexchange.com/questi...rm-request see first reply.
Reply




Theme © iAndrew 2016 - Forum software by © MyBB