[symfony-users] CSRF attack detected message

Hello all! Is there a way to change or customize the CSRF attack detected message in Symfony 1.4? Could find anything in the net... One thought was using I18N ... Take care! -- If you want to report a vulnerability issue on symfony, please send it to security at symfony-project.com You receive

Re: [symfony-users] CSRF attack detected when using sfGuardDoctrinePlugin

You might want to try this 1. Login 2. Logout 3. Open login page 4. Leave the browser alone until the session expired (e.g.: default is 30 minutes I think, so leave it for an hour to be sure) 5. Try to login I think this is a problem with CSRF and session. I actually disable CSRF protection on lo

Re: [symfony-users] CSRF attack detected when using sfGuardDoctrinePlugin

Hi Michal, You actually may be right, this problem might be related to the browser or session information. For some reason we haven't be able to reproduce this problem since this morning and we are doing exactly the same thing as before (login, logout and login again). Cheers, Jean-christophe

Re: [symfony-users] CSRF attack detected when using sfGuardDoctrinePlugin

Hi, 2010/2/11 jean-christophe zulian : > Hi list, > > After setting up the sfGuardDoctrine plugin for our project we created a > login page in the same fashion as it is done on the jobeet tutorial. > > When coming on the login page for the first time and entering > username/password the login pr

[symfony-users] CSRF attack detected when using sfGuardDoctrinePlugin

Hi list, After setting up the sfGuardDoctrine plugin for our project we created a login page in the same fashion as it is done on the jobeet tutorial. When coming on the login page for the first time and entering username/password the login procedure works fine. If we logout and enter the usern

[symfony-users] CSRF Attack

Anybody used protection against CSRF attack on their website? Thnx -- You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-us...@googlegroups.com. To unsubscribe from this group, send email to symfony-u

[symfony-users] CSRF attack in batch actions

When I try to execute a batch action (delete) which is created by the admin generator, I get an "_csrf_token [CSRF attack detected.]" message. I didn't change the actions.class.php, so it uses the default admin generated class. Does anyone know how this is possible? --~--~-~--~~--