Thread

Hi guys. I’ve Google’d around a bit and tried various things but hit a brick wall with this one. Neither I nor my client can login to the control panel, after migrating from dev to live server. We both get the “An Error Was Encountered. This form has expired. Please refresh and try again” message. I’m trying to resolve this with the host but curiously, the host is actually able to login.

I did have some SFTP/access issues with the host initially, until they tweaked their firewall. Might their still be some security issues blocking anyone outside their firewall from logging into the CP? Seems unlikely.

Done 100s of similar migrations in the past and never had this before. DB and browser cache all clear. Front end of the website is fine BTW. Any ideas?

Are all your paths correct, no leftovers from dev URL? Cookie domain name?

Hi Rob. Thanks for helping out. I’m using Focus Lab’s master config, so paths are sorted. Also, tried:

$env_config['cookie_domain'] = "";
$env_config['cookie_path'] = "";
$env_config['cookie_prefix'] = "";

That what you mean by cookie domain?

Yeh that’s what I meant by cookies 😊

That’s a bit of a stinker, but looking at the common denominator I’d hazard a guess it’s still host/firewall as that’s already been an issue.

Can you replicate the site on a different host/server and login ok, that may prove my point?

Yep, got it running on a dev server (different host). Neither me nor my client can access the CP on the live server, only the host can. Definitely feels like a firewall thang to me.

Maybe ask them to whitelist your IP address, and see if that works?

Big thanks to Joel Bradbury for solving this one. I needed to add

$config['disable_csrf_protection'] = 'y';

to my config. Here’s why:

It’ll be because the tokens have been generated on a different base domain, and then it’s moved and gotten stuck. Normally they’re regenerated when they’re detected as expired, but if it see’s them as not expired, but invalid it can get confused. The hashes are kept in exp_security_hashes, just emptying that table will do it too.

You guys save me!
Thank you!