POST https://mydomain.com/forum/login => Invalid or missing CSRF token

chaica

Hi,

Important: I need flarum in a subdirectory of another PHP app, in my case /forum

I just installed flarum with composer and everything was fine. Until I tried to log in. I have a popup with the following text:

POST https://mydomain.com/forum/login
Invalid or missing CSRF token

Here is my Apache configuration:

        Alias "/forum"  "/var/www/forum"
        <Directory "/var/www/forum">
            Options Indexes FollowSymLinks MultiViews
            AllowOverride All
        </Directory>

The .htaccess of my first php app (not flarum):

RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f 
RewriteRule ^ index.php [QSA,L]

I did not modify the .htaccess of flarum.

I can access https://mydomain.com/forum but can not log in

Thanks for Flarum, it seems really nice!

luceos

CSRF prevents cross site forgery requests. If this message is encountered either your previous page was open too long or the request was started from a page outside Flarum. Is that the case? For instance did you try logging in from your PHP app?

Also Flarum has known issues with installations inside subdirectories. Beta 5 solve these.

chaica

luceos thanks for your reply, I don't think the page was opened for too long. And i'm not connecting outside flarum, except maybe for a redirection I can not understand.

I installed flarum yesterday with compose, what version of flarum am I running ? How can I know locally?

Thanks

luceos

chaica you can find the version in the composer.lock file it's json so you would have to look for flarum/core and the version listed closely underneath.

chaica

I just tried to use the .htaccess of the beta-5 but the situation is still the same :/

chaica

I just switched to a subdomain and it works perfecdtly fine. I can't see what is wrong with my apache/.htaccess configuration though. I'll try again when beta-5 will be available.

Thanks for the support !

datitisev

chaica You can update to dev-master, but a tutorial for that is not here yet.
It will probably be released for switching form beta4 to beta5 when beta5 is released. Very soon!

chaica

datitisev I'm kind of a lazy guy so I'll wait for the availability through composer ;p i'm discovering flarum so anyway .