Avatar

No authorisation - message (Technics)

by Milo ⌂, Saturday, April 21, 2018, 15:07 (183 days ago) @ Auge

Hi,

PS: I ran for the second time during the last weeks into the trap of getting the message "No Authorization" (only this one sentence) when I wanted to use the preview-button. The message was not formatted in the forums template so I think, it's a message from the server itself and not from the forum software.

This message comes from the software. There are some calls of

die('No authorisation!');

(as well as in english.lang).

The critical part seems the check for csrf_token or the session, i.e. (posting.inc.php):

case 'posting_submitted': // is used for preview, too
 if (!isset($_POST['csrf_token']) || $_POST['csrf_token'] !== $_SESSION['csrf_token'])
  die('No authorisation!');

/Micha

--
applied-geodesy.org - OpenSource Least-Squares Adjustment Software for Geodetic Sciences


Complete thread:

 RSS Feed of thread

powered by my little forum