A possible CSRF attempt was detected. No referer was provided by the server. - My Forums

Re: A possible CSRF attempt was detected. No referer was provided by the server.

joe-petts — Dec 20, 2016, 02:26 PM

got the same error with evolution 1.2 after php-update.

A possible CSRF was detected for referer: http://www.mysite.com/manager/.

My solution:

delete the siteCache.idx.php and siteHostnames.php in assets/cache and reload the site.

Re: A possible CSRF attempt was detected. No referer was provided by the server.

taiyo1578 — Nov 28, 2012, 11:39 AM

thanks Terry this really helped....I'm using MODx 1.0.4 and got the error after trying an upgrade to 1.0.6 failed on Bluehost.

Quote from: Terry at Dec 02, 2009, 09:12 PM

The only fix was for me to change the line 228 in manager/index.php

from
if (isset($modx->config['validate_referer']) && $modx->config['validate_referer']) {

to
if (isset($modx->config['validate_referer']) && $modx->config['validate_referer'] == '1') {

in the end I had change the code to this:

if (isset($modx->config['validate_referer']) && $modx->config['validate_referer'] == '0')

despite having changed the database value to 1. unsure why it's working but it's fixed for now!

Re: A possible CSRF attempt was detected. No referer was provided by the server.

webxmodx — Feb 18, 2010, 06:01 PM

If your Web Developer Toolbar is set to disable referrers, you will need to enable sending of referrer info. That’s what I had to do to solve this problem.

Other options are detailed here: http://www.belafontecode.com/fix-modx-csrf-error-in-firefox/

Re: A possible CSRF attempt was detected. No referer was provided by the server.

Terry — Dec 02, 2009, 03:12 PM

I just installed 1.0.2 on hostgator for a new project. I’ve been working on it for a few days with no error message. Today, I started getting this message: A possible CSRF attempt was detected. No referer was provided by the server.

Per another thread I tried this fix:

The only fix was for me to change the line 228 in manager/index.php

from
if (isset($modx->config[’validate_referer’]) && $modx->config[’validate_referer’]) {

to
if (isset($modx->config[’validate_referer’]) && $modx->config[’validate_referer’] == ’1’) {

After deleting: assets/cache/siteCache.idx.php and refreshing the cache in modx manager and on the browser, no effect.

BTW, I saw two versions of the fix one like this: == ’1’ and one like this == 1. I tried both.

I have 1.0.2 installed on hostgator for another project and have never received this message. Settings appear to be the same. Both have Validate HTTP_REFERER headers? set to yes in the configuration page in the manager.

Not sure what to try next.

Thank you!

Re: A possible CSRF attempt was detected. No referer was provided by the server.

ianburrett — Nov 20, 2009, 03:21 AM

I’ve just installed a version of 1.0.2 and the issue is still there.

Which file is it that I need to make that adjustment to?

Re: A possible CSRF attempt was detected. No referer was provided by the server.

chucktrukk — Nov 09, 2009, 02:43 PM

There was a bug in 1.0.1 where modx didnt recognize turning CSRF off.

To fix, change

config['validate_referer']) && $modx->config['validate_referer']) {

config['validate_referer']) && $modx->config['validate_referer'] == 1) {

Re: A possible CSRF attempt was detected. No referer was provided by the server.

mdsdesign — Nov 03, 2009, 09:52 AM

Thanks. That other thread you pointed me to might help, but I’m not exactly sure how to do what they’re explaining. Still hoping for a better explanation.

Re: A possible CSRF attempt was detected. No referer was provided by the server.

BobRay — Nov 03, 2009, 01:46 AM

http://en.wikipedia.org/wiki/Cross-site_request_forgery

http://modxcms.com/forums/index.php?topic=36771.0

Re: A possible CSRF attempt was detected. No referer was provided by the server.

chinesedream — Nov 03, 2009, 12:35 AM

I got this couple hours ago. It went away after couple minutes.

A possible CSRF attempt was detected. No referer was provided by the server.

mdsdesign — Nov 03, 2009, 12:02 AM

A possible CSRF attempt was detected. No referer was provided by the server.

Getting this message when trying to login to my site manager in Firefox on Mac. Just updated to 1.0.1 today. Seems to be fine at the moment in Safari.

Anyone else experiencing this? What does it mean?