urosm
/
ikiwiki
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

analysis

master
Joey Hess 2009-01-05 16:15:46 -05:00
parent d4599f7250
commit 09a76de33d
1 changed files with 28 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
doc/bugs/Error:_Your_login_session_has_expired._.mdwn
View File

@ -9,3 +9,31 @@ Whilst trying to edit http://hugh.vm.bytemark.co.uk/ikiwiki.cgi via OpenID. Any
ii libnet-openid-consumer-perl 0.14-4 library for consumers of OpenID iden ii libnet-openid-consumer-perl 0.14-4 library for consumers of OpenID iden
tities tities
iki@hugh:~$ iki@hugh:~$
> This error occurs if ikiwiki sees something that looks like a CSRF
> attack. It checks for such an attack by embedding your session id on the
> page edit form, and comparing that id with the session id used to post
> the form.
>
> So, somehow your session id has changed between opening the edit form and
> posting it. A few ways this could happen:
>
> * Genuine CSRF attack (unlikely)
> * If you logged out and back in, in another tab, while the edit form was
> open.
> * If `.ikiwiki/sessions.db` was deleted/corrupted while you were in the
> midst of the edit.
> * If some bug in CGI::Session caused your session not to be saved to the
> database somehow.
> * If your browser didn't preserve the session cookie across the edit
> process, for whatever local reason.
> * If you were using a modified version of `editpage.tmpl`, and
> it did not include `FIELD-SID`.
> * If you upgraded from an old version of ikiwiki, before `FIELD-SID` was
> added (<= 2.41), and had an edit form open from that old version, and
> tried to save it using the new.
>
> I don't see the problem editing the sandbox there myself, FWIW.
> (BTW, shouldn't you enable the meta plugin so RecentChanges displays
> better?)
> --[[joey]]