CSRF attempt was detected - for certain users only [SOLVED]

Hi,

I have read a few threads about my problem, but i think my problem might be a little different.

I have a website that 2 manager users need to update.

1 of the managers can log in and do the roles he has been asigned.

The other manager has the same roles and permissions but can’t seem to login to the manager backend on his computer (windows vista i think) using IE8 or Firefox as it throws up the CSRF attempt was detected message.

when logging in using the other managers computer he has no problem. I have also logged in on my computer using his user name and password and everything is fine.

I did notice that Validate HTTP_REFERER headers? is set to yes and i dont remember setting it to yes so is this a default setting in modx 1.0.2?

also why would it only affect one user? with the other users being ok.

I will be meeting with them tomorrow so i will have a look at his computer to make sure he has cleared all the cache in his browers and that kind of stuff.

also is it recommended that the Validate HTTP_REFERER headers be set to yes or if it is set to no does it leave you easily open for problems or attacks?

Thanks for reading

Tim

Maybe related
http://www.belafontecode.com/fix-modx-csrf-error-in-firefox/
http://modxcms.com/forums/index.php/topic,42480.msg260634.html#msg260634

Hi,

thanks for the links.

it appears to have been the persons norton internet security causing the problem.

I needed to add the domain name to a list in norton, something similar to below.

http://service1.symantec.com/SUPPORT/sunset-c2002kb.nsf/46883463d5efbecc85256ee600556cc2/4ef3ba8adbc86ab285256ede00518df1

thanks for the heads up,

Tim