"Valid CSRF Token Required" in Osticket After login?

Question

My osTicket Version 1.10 is installed in PLESK Windows Server. I have tried to install XAMPP on the PLESK Windows Server but not able to start XAMPP .

Soon I get error after login to osTicket "Valid CSRF Token Required in Osticket After login" which was earlier working fine

After login I get this error:

Answer 1

I had the same problem. MySQL table 'ost_session' was broken. Run this command in MySQL: REPAIR TABLE ost_session

Answer 2

I had the same problem with PHP 7.1.1, then I changed to 7.0.15 and it worked

Answer 3

I received this error after installing OST 1.10 on Windows Server 2012 with IIS 7 using PHP Manager for IIS. (http://osticket.com/wiki/Installation#Windows_Recommended_Links) Accorinding to "To install osTicket, your web server must have PHP 5.3 (or better)" I installed "the latest PHP version" in my case 7.1.1. With PHP 7.1.1 I could not login into the SCP. After changing the PHP Version from 7.1.1 to 5.4.45 everything works fine.

Answer 4

Its because of varnish cache login credentials.

Test directly with web server host entries. It will work.

Answer 5

My configuration

• Win 2012 R2 Standard (64bit)
• PHP 7.1.7 64bit (installed by Web Platform Installer)
• MySql 14.14 Distrib 5.7.20 (installed by MySql Installer Community Edition)
• osticket 1.10 (on IIS)

I had the same problem: "Valid CSRF Token Required..."

Here is where I found the fix: https://github.com/osTicket/osTicket/commit/424bfc99d93b920f6162b602eeea41125086425d

And here is a conversation about the problem: https://github.com/osTicket/osTicket/issues/3546

Answer 6

I might be late, but what worked for me was to use another browser on my computer or clearing the cache

Answer 7

in include/class.ostsession.php

Just add this line:

$this->data->session_data = "";

After:

catch (DoesNotExist $e) {
        $this->data = new SessionData(['session_id' => $id]);

So it will be:

catch (DoesNotExist $e) {
        $this->data = new SessionData(['session_id' => $id]);
        $this->data->session_data = "";

Then try to login from scratch, don't just refresh the submission.

Answer 8

Login to you server using ssh(ssh username@ip) and then check if in your Apache/Centos config file following setting is enabled using the below command

For Centos - nano /etc/httpd/conf/httpd.conf
For Apache - nano /etc/apache2/apache2.conf

Then replace

Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure

with

#Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure

At last restart the web server.