Invalid CSRF token

Sort:
Oldest
tortoises3

I tried to invite 30 people just now in the club Scaryninja and His Friends, but it gave me the message "The CSRF token is invalid. Please try to resubmit the form." This is strange because I am an admin. and because I am an admin, I should be able to access and invite people...

Martin_Stahl
tortoises3 wrote:

I tried to invite 30 people just now in the club Scaryninja and His Friends, but it gave me the message "The CSRF token is invalid. Please try to resubmit the form." This is strange because I am an admin. and because I am an admin, I should be able to access and invite people...

 

Did it take a while to get all the names entered? Maybe it was a timeout issue. Have you tried one or two to see if it happens then?

jdcannon

Would very much like to hear response to Martin's questions. Would be good info.  

tortoises3

Yes; it worked for one or two. The problem I see with the timeout theory is that I always invite large amounts of people, which a lot of times takes even longer than the 30 invites I gave out a few minutes ago. Also, I have sometimes kept it open for 30-60 minutes at a time with people on the invite list, and it still worked fine.

jdcannon

Probably a fluke. If you try with the remaining 28 and it doesn't work, please let me know!

tortoises3

Will do!

tortoises3

Here is the html source code explaining the token:

<form
  class="form logout"
  method="post"
  action="https://www.chess.com/logout">
  <input
  type="hidden"
  name="_csrf_token"
  value="hF4WtfvzQifMMKMXFu3YLMk4DndX6wmyFYJ5B4Uml_c"/>
  </form>

 

 

LiEmpireTTV
tortoises3 wrote:

I tried to invite 30 people just now in the club Scaryninja and His Friends, but it gave me the message "The CSRF token is invalid. Please try to resubmit the form." This is strange because I am an admin. and because I am an admin, I should be able to access and invite people...

 

It doesn't matter if you are admin... CSRF tokens are used to prevent CSRF attacks and is a security control that should not be circumvented for anyone. The issue may lie the value timing out.