10 votes
Accepted

Joomla 3.6.0 to 3.6.1 results in a "invalid security token" error

If you don't have Akeeba Backup installed: Go back to the Joomla Update page Upload and install the Joomla 3.6.1 Update Package using the "Upload & Update" tab Go to Extensions >> ...
Lodder's user avatar
  • 26.9k
8 votes

Joomla 3.6.0 to 3.6.1 results in a "invalid security token" error

Details about this issue can now be found in the Joomla Docs: What is the cause? 3.6.1 introduced a CSRF token check to the update component as an extra level of security. 3.6.0 down to 2.5.4 (...
johanpw's user avatar
  • 13.3k
5 votes

Joomla 3.6.0 to 3.6.1 results in a "invalid security token" error

I also had the same error message after upgrading 3.6.0 -> 3.6.1: 0 Failed to start the session: already started by PHP ($_SESSION is set). To resolve, you need to use PHP Selector and change from 5....
Jeff's user avatar
  • 51
4 votes

how to refresh Joomla token in form by AJAX

Playing with the sessions is usually not a very safe thing to do - you could create more problems by trying to find a solution. You can do one (or both) of the following: Increase the Session ...
itoctopus's user avatar
  • 3,226
4 votes
Accepted

how to refresh Joomla token in form by AJAX

I wanted to answer your earlier question about this yesterday, but someone was already answered this partially for you. So according to me your original Login Form token field should be a bit changed ...
Zollie's user avatar
  • 2,926
4 votes

Invalid token after upgrading Joomla to 3.5

Apparently there area couple of issues with Joomla 3.5.0, one being to do with the session. Joomla 3.5.1 will be released tonight, hopefully fixing your issue. It may be an idea to put your site ...
Lodder's user avatar
  • 26.9k
3 votes
Accepted

How to check JSESSION in javascript

One way I can imagine to check the session is before you ignite the above ajax call, you make a previous ajax call to another function in com_contract/controller(task = your new session checking ...
Zollie's user avatar
  • 2,926
3 votes

Joomla 3.6.0 to 3.6.1 results in a "invalid security token" error

If people can't log into the back-end, there is an additional fix on github here: https://github.com/joomla/joomla-cms/pull/11430/files You must change the following lines on libraries/joomla/...
RichardB's user avatar
  • 3,082
2 votes

Joomla 3.6.0 to 3.6.1 results in a "invalid security token" error

It appears that I have clicked that update button little to fast... again... If I have read official Release News The Joomla! 3.6.1 Update a little bit more carefully, I would have learned following ...
Mikan's user avatar
  • 3,007
2 votes

Invalid token after upgrading Joomla to 3.5

Turn off the System - Page Cache The issue is related to the cache.
Ovi's user avatar
  • 21
2 votes
Accepted

AJAX POST request with form Token always responds with "Invalid Token"

By default JSession::checkToken() checks the post request for a value named the token. It can also be set to look for get values in a query string like JSession::checkToken('get'). It doesn't know ...
jamesgarrett's user avatar
  • 3,299
2 votes

How to develop a survey extension which prevents respondents from taking a survey more than once?

Some more ideas: Save a cookie in the user's browser. Get users IP address and store in BD.
Piero Marsilio's user avatar
2 votes
Accepted

Joomla 3.4.x to 3.6.4 Update and invalid security token on front-end login

Solving my issue Well in my case the issue was not related to Joomla core. I had to step away from it for a while and return with clear mind to find out that it was a custom directive inside the ...
FFrewin's user avatar
  • 19.7k
2 votes
Accepted

How to properly verify whether there's a token or not - Joomla checkToken() function

I think you could more easily achieve what you're trying to do by displaying the other page as a response to the HTTP POST associated with the form submission, rather than by using a redirect. After ...
Robbie Jackson's user avatar
2 votes

How to properly verify whether there's a token or not - Joomla checkToken() function

JRequest::checkToken() is deprecated. So use if( JSession::checkToken() ==false){ echo "The form was not submitted"; }else{ // Display the view parent::display($tpl); } ...
Amit Ray's user avatar
  • 237
2 votes

How to check JSESSION in javascript

well after the valuable help of @Zollie I will post the answer and working code to help others. A sample of the template file : <form action="<?php echo JRoute::_('index.php?option=...
mixahlos's user avatar
  • 418
2 votes

How to check JSESSION in javascript

To get the session state, you can use the following: JFactory::getSession()->getState(); I'm not sure if this script is inline or a separate file. If it's inline then you can simply add the ...
Lodder's user avatar
  • 26.9k
1 vote
Accepted

Can I use a temporary access token instead of username and password to create a login session?

I do not know of any plugin that does it, but one can implement it as follows: 1. Have a plugin Make sure you have a plugin, which looks like class YourPlugin extends JPlugin { //... } 2. Have a ...
Lajos Arpad's user avatar
1 vote
Accepted

Invalid security token locks out users trying to log in through an email link

After some experimentation and with the help of @Irata, it turned out that the new .htaccess entry was causing the problem. With this entry I can reproduce the issue 100%, removing the entry solves ...
wanderlusted's user avatar
1 vote
Accepted

How to use component config permissions on the frontend?

// Import `ComponentHelper` class. use Joomla\CMS\Component\ComponentHelper; // Get all params of a specific component. $params = ComponentHelper::getParams('com_yourcomponent'); // To get the value ...
Sharky's user avatar
  • 11.1k
1 vote
Accepted

How to Add a global Function to a Component

I would suggest you create a file in the helper folder of your component with a class containing your code shown above in a couple of methods and then each time your component needs to use the code ...
Irata's user avatar
  • 3,822
1 vote

How to Add a global Function to a Component

You could put both functions in a class in the helper.php file of your component. Include the helper file in the entry point of your component ( in /components/com_yourcomponentname/yourcomponentname....
pe7er's user avatar
  • 2,023
1 vote

Joomla 3.4.x to 3.6.4 Update and invalid security token on front-end login

The invalid security token was an issue in the Joomla 3.6.1 update. To fix this, please see my answer here, which also caters for user who have Akeeba Backup installed: https://joomla.stackexchange....
Lodder's user avatar
  • 26.9k
1 vote

Joomla 2.5 post with python to login

Could it be you don't handle the form token correctly? Your value ('8c7b78172222114c616d844e7dd4a75e', "1") is the form token set by the joomla application, and when you try to log in you need to ...
jonasfh's user avatar
  • 738

Only top scored, non community-wiki answers of a minimum length are eligible