Home > Application Error > Application Error #2800

Application Error #2800

This is a full reload of the page (see 0009698). ~0020831 augur (reporter) 2009-02-10 08:07 Hi. Verb for looking at someone's newspaper or phone stealthily Technical term to denote opposite of dependency injection? I have this in my php.ini file: session.gc_maxlifetime=14400 But that doesn't help. The issue occurs on Firefox and IE the latest versions. check my blog

Otherwise, we'll be releasing 1.1.7 shortly with the patch included. That does usually work for me. This issue is very important and it would be great if any solution could be found... (0026899) aiv (administrator) 2013-11-25 19:06 edited on: 2013-11-26 11:17 I fully agree with you and I'm After clearing the browser cache we still get error 2800 when submitting a second bug. ~0020840 jreese (reporter) 2009-02-13 11:21 Are any of you using a proxy server? ~0020841 augur (reporter)

See http://en.wikipedia.org/wiki/Cross-site_request_forgery for details on how it works. ~0029189 TomR (reporter) 2011-07-18 08:14 I can understand that, but then my question is if this issue is already recognized and if there And when I rollback to version 1.1.1 everything works fine. Cheers. ~0021239 skay (reporter) 2009-03-27 18:09 Hello jreese, thanks for the patch.

  1. ibs, Good question, I'll think in this direction.
  2. I never have any of these problems in Chrome: I can still use the back button without losing the contents of the original form, and I never seem to get that
  3. Steps To Reproduce1.
  4. If you could test a nightly build of 1.1.7 via http://www.mantisbt.org/builds/ that would be appreciated.
  5. Please use the "Back" button in your web browser to return to the previous page.

In it, you'll get: The week's top questions and answers Important community announcements Questions that need answers see an example newsletter By subscribing, you agree to the privacy policy and terms more hot questions question feed about us tour help blog chat data legal privacy policy work here advertising info mobile contact us feedback Technology Life / Arts Culture / Recreation Science Please adviceTagsNo tags attached.Attached Files 0001-Fix-9999-allow-form-security-to-be-disabled-for-si.patch (3,566 bytes) 2009-03-27 14:18 From 276d9e6974822db4ad1e6639271b0e97b17445f5 Mon Sep 17 00:00:00 2001 From: John Reese Date: Fri, 27 Mar 2009 14:16:51 -0400 Subject: [PATCH] Fix #9999: allow form Relationships Notes ~0019709 info4km (reporter) 2008-10-28 09:10 Last edited: 2008-11-03 09:15 I just sent mail to the help list - before I saw this.

I modified string_get_bug_page function in core/string_api.php to force browser to reload the page. This indicates that the browser is not reloading the page. and of course try $g_form_security_validation = OFF (or are there obvious reasons not to do it?) if anything will go wrong - we revert the changes. https://www.mantisbt.org/bugs/view.php?id=9754 The error message says that one should go back and fix all mistakes, but that is impossible when the form field is cleared.Additional Informationphp: Using memcached sessions, session.gc_maxlifetime = 1440 mantis:

No error messages, I choose the project, the browser blinks and nothing happens. While I don't have a lot of hackers going to my site - probably that could work for now. ~0029187 TomR (reporter) 2011-07-18 07:21 Last edited: 2011-07-18 07:27View 2 revisions I am has duplicate0012381closeddregadAPPLICATION ERROR #2800 has duplicate0015502closeddregadAPPLICATION WARNING 0002702: Your session has become invalidated. In the sense that it should at least try to grab a new security token if it can before erroring out. ~0024834 liyingm (reporter) 2010-03-21 18:26 Thanks for the reply.

This was an active session, definitely not timed-out. https://www.mantisbt.org/bugs/view.php?id=9999 I think the delay between loading the form and submitting it is the key because it happened once in exactly the same way on my own tracker with 1.2.0a2 (trunk r5751). Also note that my Solaris 9 test system (also 2.0.59 apache, IE7) does not produce the error so far. ~0019712 Gryphon (reporter) 2008-10-28 10:21 Last edited: 2008-10-28 12:28 Same problem is happening In one project I can't create a new bug entry.

Commit has been tested on: FF 2.0.14 FF 3.0.4 IE 8.0.6001.18241 IE 6.0.2900.5122 GC Opera 9.51.10081 mod - core.php [Diff] [File] Related Changesets Issue History Date Modified Username Field Change click site As an idea...would it easily possible to add an dummy parameter (as an GUID) in every get request (every link) like view.php?id=999&dummy=4582n4b2g4k56b3k ? There you can correct whatever problems were identified in this error or select another action. However, when I go to project B, everything seems ok, until I want to submit a bug for project B.

Did you submit the form twice by accident? So far I haven't been able to get it working again. We have updated a 1.1.1 installation to 1.1.6. news However, Mantis obviously has some internal timeout for validity of the input forms, and when the user presses "Submit", the following error appears: ----- APPLICATION ERROR #2800 Invalid form security token.

go Report issue 2. add user 4. it's stays boring to use ~0019773 flc (reporter) 2008-11-04 15:35 MIB - Most important bug Some clients can't submit issues.

The have been instructed to use the Ctrl-F5 workaround. *I have posted the same note in 0009698 but since this is open I thought I 'd repost it. ~0020823 ga_acad (reporter)

I've checked, the $g_allow_browser_cache directive is not set in the config.inc.php. Still the same problem. But where can I reset the time out variable? ~0024836 dhx (reporter) 2010-03-21 23:29 Form security tokens are stored in PHP sessions and thus are subject to PHP's settings relating to When I click on 'Report Issue', the form loads, but no logging occurs (in Opera).

mod - core/form_api.php [Diff] [File] mod - config_defaults_inc.php [Diff] [File] MantisBT: master-1.1.x 72235214 Timestamp: 2009-03-27 18:16:51 Author: jreese [Details] [Diff] Fix 0009999: allow form security to be disabled for sites that Is my workplace warning for texting my boss's private phone at night justified? The 'fix' there is simply to turn off form validation. More about the author But it seems to be more consistent at the moment (note that I first didn't have any problem).

asked 3 years ago viewed 579 times active 7 months ago Get the weekly newsletter! I upgraded from 1.1.2 to 1.1.6 on a "Development" version of Mantis. I think this covers over 95% of all such cases. mt_rand() ); switch ( $g_show_action ) { case BOTH: if ( ( null !== $p_user_id ) && ( ON == user_pref_get_pref( $p_user_id, 'advanced_' . $p_action ) ) ) { return 'bug_'

However, I *cannot* replicate the issue with any other browser, including Firefox 3, Opera, and IE7; hence my comment above to make sure that you do not have $g_allow_browser_cache set in So this is more and more looking like a PHP problem and not really a mantis problem. As the common reason of 2800 error is session timeout (session files are cleaned on the server by garbage collector or session variables are passed away by any reason) the mechanism I am also getting it repeatedly with 1.1.4, but not everytime.

has duplicate0010148closeddhxSesssion Timeout has duplicate0013952closedatrolInvalid form security token. Reading the changes I have the impression that the correction is not appropriate: too many lines commented out, than IE case handled with "default" case, meaning caching. ~0019964 dplinnane (reporter) 2008-11-21 go manage_proj 2.