More issues with Valid CSRF

[askdata01]

Prerequisites

• Can you reproduce the problem in a fresh installation of the "develop" branch?
• Do you have any errors in the PHP error log, or javascript console?
• Did you check the osTicket forums?
• Did you perform a cursory search to see if your bug or enhancement is already reported?

For more information on how to write a good bug report

Description

[Description of the bug or feature]

Steps to Reproduce

1. [First Step]
2. [Second Step]
3. [and so on...]

Expected behavior: [What you expected to happen]

Actual behavior: [What actually happened]

Versions

Admin panel -> Dashboard -> Information which also additionally gives you information about you server.

Also, please include the OS and what version of the OS you're running. As well as your browser and browser version.

[JediKev]

@askdata01

Please fill out the Issue form as we have no clue what you are talking about.

There are multiple Issues open and multiple pull requests open to fix this. Please sort through these and apply them to address your issue.

Helpful pulls:

• login: Fix CSRF fail, add shake effect on authentication fail #3955
• 1.11 Should Support PHP 7.1 #4344

Please close this issue in favor of the original one opened:
#3546

Cheers.

[askdata01]

My apologies for not filling in the form. I accidentally submitted the request. None of the pulls or original apply. OSTicket version 1.10.4ST OS: CentOS7 Php: 5.6.37 MySQL: 5.7.23 Apache 2.4.6 This was an upgrade of an existing 1.6ST install but after upgrading the files, I can’t access the admin panel. There are no errors logged in the Apache logs, mysql logs, php logs. I turned error reporting on in the bootstrap.php but nothing except the valid CSRF message comes up. Looking at the cookies path, it is the correct location of the installation. I tried adding the code to the class.ostsession.php but that also did not resolve the issue. I should mention that the 1.6ST installation is running on RHEL 6.5, php 5.6.33, Apache 2.2, and MySQL 5.1.73. I did the MySQL update using mysqldump and the logical update procedure. I tested the 1.6ST on the new server after the updates and it ran fine. It only broke after updating to the 1.10.4 ST version. Thanks, Steve From: JediKev <notifications@github.com> Sent: Tuesday, August 14, 2018 3:40 PM To: osTicket/osTicket <osTicket@noreply.github.com> Cc: Williamson, Steven C. <williamsons@uncw.edu>; Mention <mention@noreply.github.com> Subject: Re: [osTicket/osTicket] More issues with Valid CSRF (#4446) @askdata01<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Faskdata01&data=01%7C01%7Cwilliamsons%40uncw.edu%7C4fe77b89c6324fc1f2f708d6021dbd60%7C2213678197534c75af2868a078871ebf%7C1&sdata=JlkdDIhhN9qV5hbJyNKQwqkXEXnoQY7B6KU8lI%2FFalo%3D&reserved=0> Please fill out the Issue form as we have no clue what you are talking about. There are multiple Issues opened and multiple pull requests open to fix this. Please sort through these and apply them to address your issue. Helpful pulls: * #3955<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FosTicket%2FosTicket%2Fpull%2F3955&data=01%7C01%7Cwilliamsons%40uncw.edu%7C4fe77b89c6324fc1f2f708d6021dbd60%7C2213678197534c75af2868a078871ebf%7C1&sdata=ZKSc7Hr74sbrVMa5muQG3zZ%2FQPIzLX9b6IlvfN0eslg%3D&reserved=0> * #4344<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FosTicket%2FosTicket%2Fpull%2F4344&data=01%7C01%7Cwilliamsons%40uncw.edu%7C4fe77b89c6324fc1f2f708d6021dbd60%7C2213678197534c75af2868a078871ebf%7C1&sdata=0QyCOkfQLpVvY0IithofTdg%2B1niUfHDpD4fe3Oit%2FAg%3D&reserved=0> Please close this issue in favor of the original one opened: #3546<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FosTicket%2FosTicket%2Fissues%2F3546&data=01%7C01%7Cwilliamsons%40uncw.edu%7C4fe77b89c6324fc1f2f708d6021dbd60%7C2213678197534c75af2868a078871ebf%7C1&sdata=07VC25FpjRbuB8%2Bjv5yLSnCXVoHA6zUiVGVYowPhv6I%3D&reserved=0> Cheers. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FosTicket%2FosTicket%2Fissues%2F4446%23issuecomment-412991213&data=01%7C01%7Cwilliamsons%40uncw.edu%7C4fe77b89c6324fc1f2f708d6021dbd60%7C2213678197534c75af2868a078871ebf%7C1&sdata=mgZq80y31LyipOBf1abbZe0KSVrJfbE9Qk3YqD0z42E%3D&reserved=0>, or mute the thread<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAf4mIcsvRKjZc7AxR5SAYMw4aDHpSVPeks5uQyeWgaJpZM4V9DPH&data=01%7C01%7Cwilliamsons%40uncw.edu%7C4fe77b89c6324fc1f2f708d6021dbd60%7C2213678197534c75af2868a078871ebf%7C1&sdata=rg0tA%2B6ITo9AJOWZmbYfkNSzb69ZgD7303hqIcPdZXE%3D&reserved=0>.

[JediKev]

@askdata01

That's weird, as I've been able to upgrade from 1.6 ST to 1.10.4 and even 1.11.0rc-1 just fine with no errors. There has to be a more descriptive error somewhere... if you are receiving the "Valid CSRF Token Required" error it means the system cannot validate your session. Have you tried refreshing the page or visiting the page in an Incognito window?

Cheers.

[ntozier]

Also have you tried clearing cache.

[askdata01]

Yes to all the questions. I have tried multiple browsers, incognito windows, clearing cache, etc. Nothing has worked. And no logs to look at so not sure where to go from here. Thanks. Steve From: JediKev <notifications@github.com> Sent: Tuesday, August 14, 2018 4:19 PM To: osTicket/osTicket <osTicket@noreply.github.com> Cc: Williamson, Steven C. <williamsons@uncw.edu>; Mention <mention@noreply.github.com> Subject: Re: [osTicket/osTicket] More issues with Valid CSRF (#4446) @askdata01<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Faskdata01&data=01%7C01%7Cwilliamsons%40uncw.edu%7C2626eb492eeb459c0c2408d602232e54%7C2213678197534c75af2868a078871ebf%7C1&sdata=cmUUl4osZntcyV%2F3rHaScdzAMaH5F1jp0SqSJk9tatk%3D&reserved=0> That's weird, as I've been able to upgrade from 1.6 ST to 1.10.4 and even 1.11.0rc-1 just fine with no errors. There has to be a more descriptive error somewhere... if you are receiving the "Valid CSRF Token Required" error it means the system cannot validate your session. Have you tried refreshing the page or visiting the page in an Incognito window? Cheers. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FosTicket%2FosTicket%2Fissues%2F4446%23issuecomment-413002134&data=01%7C01%7Cwilliamsons%40uncw.edu%7C2626eb492eeb459c0c2408d602232e54%7C2213678197534c75af2868a078871ebf%7C1&sdata=cPjFUH8IyzOfC42NGAX4CIz12FRpeQHZi1vU0hYEKa4%3D&reserved=0>, or mute the thread<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAf4mIXTeGE32wt7Sdyji7lfSXBUGmtnsks5uQzC3gaJpZM4V9DPH&data=01%7C01%7Cwilliamsons%40uncw.edu%7C2626eb492eeb459c0c2408d602232e54%7C2213678197534c75af2868a078871ebf%7C1&sdata=aQlNgUHCoqTVlxFVeaU%2FQ%2BZqKlIsHGi6RUco3DNocdM%3D&reserved=0>.

[askdata01]

Yes, and multiple browsers and incognito windows. With nothing in any logs to work with, not sure where to go from here. I thought about creating a user directly in the database to see if it is db issue with passwords or some such. What are your thoughts on that? From: ntozier <notifications@github.com> Sent: Tuesday, August 14, 2018 4:23 PM To: osTicket/osTicket <osTicket@noreply.github.com> Cc: Williamson, Steven C. <williamsons@uncw.edu>; Mention <mention@noreply.github.com> Subject: Re: [osTicket/osTicket] More issues with Valid CSRF (#4446) Also have you tried clearing cache. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FosTicket%2FosTicket%2Fissues%2F4446%23issuecomment-413003267&data=01%7C01%7Cwilliamsons%40uncw.edu%7C7d625b3b42084588697008d60223b4ad%7C2213678197534c75af2868a078871ebf%7C1&sdata=WIPtPFRzs4w78DlotcxHYfR9KR4yWYab7OAC%2Bfn4pnQ%3D&reserved=0>, or mute the thread<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAf4mIf0JnRkstaeLtLNr8gUfjbqptXm3ks5uQzGYgaJpZM4V9DPH&data=01%7C01%7Cwilliamsons%40uncw.edu%7C7d625b3b42084588697008d60223b4ad%7C2213678197534c75af2868a078871ebf%7C1&sdata=Xo1Smr6Q%2Fi8a5iRHavJs2JITogvsgtRuPTb9ISz3wIA%3D&reserved=0>.

[cmadera]

I have the same issue, in my case I moved the application from an Ubuntu 16.04 with PHP 5 to Ubuntu 18.04.2 with PHP 7.2.7.

[ntozier]

@cmadera osTicket does not support PHP 7.2.7 at this time. Please downgrade to PHP5.6