• Welcome to the Chevereto user community!

    Here users from all over the world gather around to learn the latest about Chevereto and contribute with ideas to improve the software.

    Please keep in mind:

    • This community is user driven. Be polite with other users.
    • We recommend purchasing a Chevereto license to participate in this community.
    • Purchase a Community Subscription to get even faster ticket response times.

login problem

Status
Not open for further replies.
Make sure the server is handling sessions properly. Chevereto uses a CSRF protection that uses that.
 
I never said that you need to disable the protection. I said that you need to check if sessions are working properly, most likely there is an issue with the session save path.
 
Last edited:
I'm afraid that you will need to ask your hosting company about it. Chevereto uses server sessions to store an auth_token value, this value must match with the one printed in the forms. By doing this the system checks that the request comes from your website (prevents CSRF).

The problem is that in your website every new load is refreshing this auth_token value, which means that PHP isn't storing that session data so Chevereto can't check properly the auth_token value.

Chevereto Tech support doesn't cover server issues or server misconfigurations, however, I've told you what is the issue so you shouldn't have issues to get this fixed with your server administrator. Just tell him to fix the permissions in the session save path.
 
An update on this, I've noticed that some cache system may cause conflicts with session data. Try to check if you have memcache or anything similar is affecting session storage.
 
Status
Not open for further replies.
Back
Top