News:

Want to get involved in developing SMF? Why not lend a hand on our GitHub!

Main Menu

Token Validation error when trying to Admin. (FireFox only)

Started by Nodaz, February 10, 2025, 02:22:15 PM

Previous topic - Next topic

Nodaz

I have an install of 2.1.4  that is presenting a Token Validation error whenever i try to save or update anything.  It was working fine and then one day started presenting this error( weeks ago)>
The only time it does not error that i can find is when i remove unused (old) member accounts)>
 
The only mod i have installed is Image for "Anti-Spam Verification Questions".
       
I have a virtually identical install of another forum that presented the same error initially but after clearing the cookies in FF and restarted the PC it worked and has since.  The second forum will not "fix".

The ONLY thing i can find different between the two is that on the failing forum under Server settings/general in SSL mode there are entries under "image Proxy Secret" and "Maximum file size" but they are grayed out an i cannot alter or remove them. The functioning forum does not have these entries>

 
This happens on FF on my PC and on FF Mobile.  Everything works fine on Chrome or MS edge

I have cleared the Firefox Cache and restarted the PC>
SMF cookies are different on the two forums.     
Made a post in a Mozilla/Firefox group no responses.
filled report on Bugzilla, nothing of any meaning other than and acknowledgement.

Any insight on what is happening and why will be greatly appreciated>






Nodaz

Is there anyone who can possibly offer any more insight here?
I just spent the last week or 10 days on Bugzilla trying to get this fixed, guided by experts and using the MozRegression tool, all builds cause this same failure.  This doesn't appear to be a Firefox issue.  Something is stuck, something is causing these Token Validation error on this specific website/forum.  I have TWP separate forums that are configured identically and the other one does not have any issues.

TwitchisMental

Let's get some basic information so the support team can assist further .

Going off of the information provided this might be a simple http/https or www.  Issue.

Are you using https? Also are you using www in the links?


Nodaz

Quote from: TwitchisMental on February 22, 2025, 07:36:57 PMLet's get some basic information so the support team can assist further .

Going off of the information provided this might be a simple http/https or www.  Issue.

Are you using https? Also are you using www in the links?



Ok thank you or the reply and direction. 
  If i type in any version www.greenfieldlakeshoa.com or greenfieldlakeshoa.com or http://greenfieldlakeshoa.com they all resolve to https://greenfieldlakeshoa.com/

The working website/forum , typing in any variation example previously but the the casinoarizonapoker url resolves to https://www.casinoarizonapoker.com

So there is something different.

TwitchisMental

Have you tried running repair_settings.php and making sure everything is set to https?


Nodaz

Quote from: TwitchisMental on February 26, 2025, 01:08:24 AMHave you tried running repair_settings.php and making sure everything is set to https?


I have not , can you be specific what i am looking for and where when i run it?
?

TwitchisMental

Well it really depends on how you have everything setup. Eg - Are you using HTTPS? Are you using WWW. in your url?

You will need to go under paths & urls and check to be sure everything is correct.

It typically has a recommended value for the paths and urls.

Nodaz

Quote from: TwitchisMental on February 26, 2025, 04:53:22 PMWell it really depends on how you have everything setup. Eg - Are you using HTTPS? Are you using WWW. in your url?

You will need to go under paths & urls and check to be sure everything is correct.

It typically has a recommended value for the paths and urls.
PArdon the ignorance when you say "how you have things set-up"  , setup where?

in the cazpoker url everythign resolves to https:///www.casinoarizonapoker.com  but with this one it resolves to https://greenfieldlakeshoa.com (no www.) could that be something in the htaccess file cuaing this?

Ok ill take a look a bit later. my host was having an issue with the FTP validation and was down for a bit, got that worked out.  I wont be able to upload the settings_repair till later on tonight or tomorrow morning and see.  If not "normal" i will set everything to "recommended".


Illori

if you open repair_settings.php with the URL having https/www then the URL's it will suggest will have those in them.

Sir Osis of Liver

When in Emor, do as the Snamors.
                              - D. Lister

Nodaz

Quote from: Sir Osis of Liver on February 26, 2025, 09:05:51 PMWhat's in .htaccess?

On the non working site:

====

# 301 REDIRECT HTTP TO HTTPS AND WWW TO NON-WWW
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTPS} off [OR]
RewriteCond %{HTTP_HOST} ^www\. [NC]
RewriteCond %{HTTP_HOST} ^(?:www\.)?(.+)$ [NC]
RewriteRule ^ https://%1%{REQUEST_URI} [L,NE,R=301]
</IfModule>


====

# php -- BEGIN cPanel-generated handler, do not edit
# Set the "ea-php72" package as the default "PHP" programming language.
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php72 .php .php7 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit


On the working site:
# Enable Rewrite Engine
RewriteEngine On

# Force HTTPS
RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# Redirect to www
RewriteCond %{HTTP_HOST} !^www\.
RewriteRule ^ https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# php -- BEGIN cPanel-generated handler, do not edit
# Set the "ea-php72" package as the default "PHP" programming language.
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php72 .php .php7 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit

Sir Osis of Liver

The first 301 redirect is correct, should be working.  Have you run repair_settings?

You should be using php 8.1 or 8.2.
When in Emor, do as the Snamors.
                              - D. Lister

Nodaz

Quote from: Sir Osis of Liver on February 27, 2025, 04:07:49 PMThe first 301 redirect is correct, should be working.  Have you run repair_settings?

You should be using php 8.1 or 8.2.

I got delayed with some things to day and was unable to run it.  When you say i should be running php8.1 or 8.2, how something i can change in cpanel?

the "working".htaccess is something that was suggested to me here with another issue.  do you see anything "wrong" with it?


Sir Osis of Liver

You can try using the .htaccess from the working site, but they do basically the same things.  You need to run repair_settings before you mess with anything else.  Some hosts allow you to select php version in your control panel, others do not.  All php versions earlier than 8.1 are eol.
When in Emor, do as the Snamors.
                              - D. Lister

Nodaz

Quote from: Sir Osis of Liver on February 27, 2025, 09:37:26 PMYou can try using the .htaccess from the working site, but they do basically the same things.  You need to run repair_settings before you mess with anything else.  Some hosts allow you to select php version in your control panel, others do not.  All php versions earlier than 8.1 are eol.
Ok thank you i am going to run the repair-settings first and then i will check with my hosting provider for guidance in regard to the php aspect of the htsccess file.  That part was implemented years ago and im pretty confident that needs to be updated.  As i recall i can generate it through cpanel or whm but ill find out.

Again...
I appreciate your patience and effort to assist me as i learn.
 

Nodaz

Ran repair settings, there was one "red" warning in queryless urls which i changed to "off" as recommended and seen as seen in screenshot. i also used the apply all recommendations and saved. tested site looked normal, deleted the repair_setting.php file, rebooted and attempted to remove/manage two errors and still receive a Token validation error.
Screenshots attached redacted the database information

Kindred

Is FileBase a valid cache system that smf recognizes? Because it's not in the standard list...

Also,  try turning off database driven sessions
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

Nodaz

Quote from: Kindred on February 28, 2025, 01:39:56 PMIs FileBase a valid cache system that smf recognizes? Because it's not in the standard list...

Also,  try turning off database driven sessions
So i checked the functioning site and it lists "filebased" as well.
I have mirrored all setting from the working site to the non working site ( database entrees respectively independent)

I was able to turn of database driven sessions( still getting token validation error)
 I am still receiving the token Validation error on one site but not the other

Is there a way to do a full reset of the SMF software and retain the data (current posts etc?)




Advertisement: