10
votes
Accepted
Joomla 3.6.0 to 3.6.1 results in a "invalid security token" error
If you don't have Akeeba Backup installed:
Go back to the Joomla Update page
Upload and install the Joomla 3.6.1 Update Package using the "Upload & Update" tab
Go to Extensions >> ...
- 26.8k
8
votes
Joomla 3.6.0 to 3.6.1 results in a "invalid security token" error
Details about this issue can now be found in the Joomla Docs:
What is the cause?
3.6.1 introduced a CSRF token check to the update component as an extra level of security. 3.6.0 down to 2.5.4 (...
- 13.3k
5
votes
Joomla 3.6.0 to 3.6.1 results in a "invalid security token" error
I also had the same error message after upgrading 3.6.0 -> 3.6.1:
0 Failed to start the session: already started by PHP ($_SESSION is set).
To resolve, you need to use PHP Selector and change from 5....
- 51
4
votes
Invalid token after upgrading Joomla to 3.5
Apparently there area couple of issues with Joomla 3.5.0, one being to do with the session.
Joomla 3.5.1 will be released tonight, hopefully fixing your issue.
It may be an idea to put your site ...
- 26.8k
4
votes
Accepted
How to generate a pseudo random one time use code for request token
I also sometimes need to refresh the session token to prevent the user from using the back button or resubmitting the page. I do it in my controller with the below method
/**
* Convenience method to ...
- 685
4
votes
how to refresh Joomla token in form by AJAX
Playing with the sessions is usually not a very safe thing to do - you could create more problems by trying to find a solution.
You can do one (or both) of the following:
Increase the Session ...
- 3,186
4
votes
Accepted
how to refresh Joomla token in form by AJAX
I wanted to answer your earlier question about this yesterday, but someone was already answered this partially for you. So according to me your original Login Form token field should be a bit changed ...
- 2,846
3
votes
Accepted
How to check JSESSION in javascript
One way I can imagine to check the session is before you ignite the above ajax call, you make a previous ajax call to another function in com_contract/controller(task = your new session checking ...
- 2,846
3
votes
Joomla 3.6.0 to 3.6.1 results in a "invalid security token" error
If people can't log into the back-end, there is an additional fix on github here:
https://github.com/joomla/joomla-cms/pull/11430/files
You must change the following lines on
libraries/joomla/...
- 3,072
3
votes
How to generate a pseudo random one time use code for request token
The token is tied to the current user's session and is unique to that. As soon as that user has logged out then the token is no longer usable.
i've never seen an issue with this set up for avoiding ...
- 1,006
2
votes
Joomla token with ajax request
First of all this sounds very weird.
When opening the page in two browsers, Joomla should generate two different session ids (check the cookies that Joomla generates, they should be different!). ...
- 3,650
2
votes
Accepted
Invalid Token - Login Issue
There have been a lot of known (yet unfixed) issues with the System Cache plugin and Use Browser Caching when trying to login. A lot of people have reported an Invalid Token.
There are some other ...
- 26.8k
2
votes
Invalid token after upgrading Joomla to 3.5
Turn off the System - Page Cache
The issue is related to the cache.
- 21
2
votes
Joomla 3.6.0 to 3.6.1 results in a "invalid security token" error
It appears that I have clicked that update button little to fast... again...
If I have read official Release News The Joomla! 3.6.1 Update
a little bit more carefully, I would have learned following ...
- 3,007
2
votes
Accepted
AJAX POST request with form Token always responds with "Invalid Token"
By default JSession::checkToken() checks the post request for a value named the token. It can also be set to look for get values in a query string like JSession::checkToken('get'). It doesn't know ...
- 3,269
2
votes
How to develop a survey extension which prevents respondents from taking a survey more than once?
Some more ideas:
Save a cookie in the user's browser.
Get users IP address and store in BD.
- 1,662
2
votes
Accepted
Joomla 3.4.x to 3.6.4 Update and invalid security token on front-end login
Solving my issue
Well in my case the issue was not related to Joomla core. I had to step away from it for a while and return with clear mind to find out that it was a custom directive inside the ...
- 19.6k
2
votes
Accepted
How to properly verify whether there's a token or not - Joomla checkToken() function
I think you could more easily achieve what you're trying to do by displaying the other page as a response to the HTTP POST associated with the form submission, rather than by using a redirect.
After ...
- 1,746
2
votes
How to properly verify whether there's a token or not - Joomla checkToken() function
JRequest::checkToken() is deprecated. So use
if( JSession::checkToken() ==false){
echo "The form was not submitted";
}else{
// Display the view
parent::display($tpl);
}
...
- 237
2
votes
How to check JSESSION in javascript
To get the session state, you can use the following:
JFactory::getSession()->getState();
I'm not sure if this script is inline or a separate file. If it's inline then you can simply add the ...
- 26.8k
2
votes
How to check JSESSION in javascript
well after the valuable help of @Zollie I will post the answer and working code to help others.
A sample of the template file :
<form action="<?php echo JRoute::_('index.php?option=...
- 418
1
vote
Accepted
Invalid security token locks out users trying to log in through an email link
After some experimentation and with the help of @Irata, it turned out that the new .htaccess entry was causing the problem. With this entry I can reproduce the issue 100%, removing the entry solves ...
- 139
1
vote
Accepted
How to use component config permissions on the frontend?
// Import `ComponentHelper` class.
use Joomla\CMS\Component\ComponentHelper;
// Get all params of a specific component.
$params = ComponentHelper::getParams('com_yourcomponent');
// To get the value ...
- 9,936
1
vote
Accepted
How to Add a global Function to a Component
I would suggest you create a file in the helper folder of your component with a class containing your code shown above in a couple of methods and then each time your component needs to use the code ...
- 3,012
1
vote
How to Add a global Function to a Component
You could put both functions in a class in the helper.php file of your component.
Include the helper file in the entry point of your component ( in /components/com_yourcomponentname/yourcomponentname....
- 1,803
1
vote
Joomla 3.4.x to 3.6.4 Update and invalid security token on front-end login
The invalid security token was an issue in the Joomla 3.6.1 update. To fix this, please see my answer here, which also caters for user who have Akeeba Backup installed:
https://joomla.stackexchange....
- 26.8k
1
vote
Joomla 2.5 post with python to login
Could it be you don't handle the form token correctly? Your value ('8c7b78172222114c616d844e7dd4a75e', "1") is the form token set by the joomla application, and when you try to log in you need to ...
- 738
Only top scored, non community-wiki answers of a minimum length are eligible