Thread

This is an archived forum and the content is probably no longer relevant, but is provided here for posterity.

The active forums are here.

CSRF Protection Doesn't Work in Clean EE Install

November 16, 2012 11:20pm

Subscribe [1]

#1 / Nov 16, 2012 11:20pm
moprimo
2 posts
So I installed EE for the very first time. Copied the files, created the DB and user, ran the installation, and everything worked great.

Next, I go into my config file and set:
```
$config['csrf_protection'] = TRUE;
```
That’s all it takes… now I can’t log into the Control Panel! I get the “The action you have requested is not allowed.”

What am I doing wrong!?
#2 / Nov 20, 2012 11:43am
Dan Decker
7338 posts
Hi iMopri,

Welcome to ExpressionEngine and the Forums!

With most $config items, they are not boolean TRUE/FALSE, they are y/n. Try setting the value like so:
```
$config['csrf_protection'] = 'y';
```
Cheers,