Security Token, most actions stop at http://martialconversations.com/pages/security_check/

0 views
Skip to first unread message

LanceW

unread,
Dec 1, 2009, 3:25:02 PM12/1/09
to NoseRub
Hi all (Dirk/Daniel),
I have 0.8.5a installed at http://martialconversations.com/ and have
come across a problem I am not encountering on my dev installation.
When I try and create new discussion topics and/or try and bookmark a
link, I get the security page ( http://martialconversations.com/pages/security_check/
).

How does the security token work?
Any ideas why this would be failing on my server but not on my local
install?

Lance

Daniel Hofstetter

unread,
Dec 2, 2009, 10:59:19 AM12/2/09
to NoseRub
Hi Lance,

> I have 0.8.5a installed athttp://martialconversations.com/and have
> come across a problem I am not encountering on my dev installation.
> When I try and create new discussion topics and/or try and bookmark a
> link, I get the security page (http://martialconversations.com/pages/security_check/
> ).
>
> How does the security token work?

If you are logged in, a security token is written to the database
everytime a view is rendered. This security token is also appended to
forms and links. If such a form is submitted or a link clicked, it is
verified whether the security token in the request is identical to the
security token in the database. If that's not the case, you get the
"security check" page. See also AppController::ensureSecurityToken(),
Identity::isCorrectSecurityToken() and Identity::updateSecurityToken
().

> Any ideas why this would be failing on my server but not on my local
> install?

No :| Maybe Dirk has an idea what the problem could be...

Regards,
daniel

LanceW

unread,
Dec 3, 2009, 4:55:44 PM12/3/09
to NoseRub
Thanks Daniel,
I'll take a look.

widmer.marc

unread,
Dec 4, 2009, 3:50:48 AM12/4/09
to NoseRub
got the same error a few times
Reply all
Reply to author
Forward
0 new messages