ExpressionEngine® Answers is a question and answer site for administrators, end users, developers and designers for ExpressionEngine® CMS. It only takes a minute to sign up.
Sign up to join this community
I updated from 2.1.0 to 2.8.1 and afterwards tried to login to the CP, got this error.
"This form has expired. Please refresh and try again."
Made sure there was no folders in the cache but I maybe something is stuck in the db. Not sure and need some help.
Any ideas?
Ok so after 5 hours of banging my head on the table and only getting a nasty bump on my forehead I have a fix that was a 1 second fix.
Basically I had to comment out like this //$config['cookie_prefix'] = ''; in config.php
This all started to happen after I moved from a Plesk environment to a Cpanel setup.
Originally I found the follow code from another answer dealing with not being able to login and it worked so I went through and commented out 1 item at a time. Leaving me with the answer and fix, here is that code. I hope it helps save someone else time and aggravation.
$config['cookie_domain'] = "";
$config['cookie_path'] = "";
$config['cookie_prefix'] = "";
$config['admin_session_type'] = "s";
$config['user_session_type'] = "c";
$config['require_ip_for_login'] = "n";
$config['require_ip_for_posting'] = "n";
$config['secure_forms'] = "n";
cookie_domain config item, which was set to the live domain in the settings, so locally it borked out.
– Low
Dec 10 '15 at 14:18
I would recommend against editing the config file. Instead, it appears you need to include the following line in any that is posting
<input type="hidden" name="XID" value="{XID_HASH}" />
I had the exact same issue when updating from 2.5.2 to 2.8.1. I added that line and all is good. A few simple AJAX POSTs I converted to GETs to also get around this issue.
I found this solution on this thread: http://ellislab.com/forums/viewthread/237658/
$config['disable_csrf_protection'] = "y";
More info here: http://ellislab.com/blog/entry/sessions-login-modals-and-secure-forms-in-expressionengine-2.8
<input type="hidden" name="XID" value="{XID_HASH}" /> fixed it for me. I did not need to modify the config setting. Thanks.
– Bradley Flood
May 30 '14 at 5:52
