Search found 6 matches

by irfan12jan
Sat Feb 16, 2008 6:30 pm
Forum: Bugs
Topic: Cross Site Request Forgery (XSRF) aimed at you?
Replies: 28
Views: 40617

Yes i am using IIS 6.0 (Windows 2003), Yes you are right it seems like the problem with PHP Session but i can't find any documentation or instructions which tells me how to set it correctly. If you have any other references on setting it up i will really appreciate.

thanks,
by irfan12jan
Sat Feb 16, 2008 3:53 pm
Forum: Bugs
Topic: Cross Site Request Forgery (XSRF) aimed at you?
Replies: 28
Views: 40617

i really liked the software but can't get it working. I just reinstalled the 1.3 and installation said every thing is fine

In IE it stays loged in Admin panel but get XSFR error and in firefox after login when you click on any funcion it takes you back to login screen. I am using IE7.

Will really ...
by irfan12jan
Sat Feb 16, 2008 3:24 pm
Forum: Bugs
Topic: Cross Site Request Forgery (XSRF) aimed at you?
Replies: 28
Views: 40617

the function looks like

Code: Select all

function serendipity_checkXSRF() {
    global $serendipity;

    
    return false;
}
by irfan12jan
Sat Feb 16, 2008 6:48 am
Forum: Installation
Topic: s9y + iis
Replies: 8
Views: 6723

hi, could you please let me know where did you get the version 1.3, i am facing same issue.
by irfan12jan
Fri Feb 15, 2008 6:51 pm
Forum: Bugs
Topic: Cross Site Request Forgery (XSRF) aimed at you?
Replies: 28
Views: 40617

thanks for the quick reply gravin, I really appreciate it. The session_path does exist and PHP is writing files to that directory fine. i have multiple sites on server so not sure what should be cookie_path should be.

Per your instructions above i did remove the XSFR check and that function only ...
by irfan12jan
Fri Feb 15, 2008 5:46 pm
Forum: Bugs
Topic: Cross Site Request Forgery (XSRF) aimed at you?
Replies: 28
Views: 40617

Same issue

Hi, i have exact same issue, i updated the code as described above but i still get the error. Can you please help.

thanks.

I am using IIS 6 with PHP 4.4.1

here is my session Info

Session Support enabled
Registered save handlers files user

Directive Local Value Master Value
session.auto ...