Geeklog Forums

My client has an issue about the editor.
He was editting topics and had an error of expired token.
He is admin. He had this issue multiple times recently.
The error says Then he input his id and password, whenever he did that, the texts he had editted was cleared and lost after that. He says it was so annoying.
I have no idea how to fix it because I don't know how to reproduce the issue. The session time is probably determined by geeklog system.

I want some advice and fix it.
Thanks.

geeklog version:2.1.3
editor:ckeditor

Hi OMAL,

Security tokens last 20 mins so you would need to open the editor on an article, wait over 20 minutes and then try to save the article to see the error.

Unfortunately that is an issue in Geeklog v2.1.3. The good news is that in Geeklog v2.2.0 it has been fixed so you could upgrade the site.

Your other option is you can try modifying the user file. It was the only file changed for the fix. I would not copy the whole file as that could create other issues in Geeklog v2.1.3 but you could copy over the changes to see if it is fixed:

Info on the issue: https://github.com/Geeklog-Core/geeklog/issues/837

Actual fix: https://github.com/Geeklog-Core/geeklog/commit/d678030514624eddcf14222a083fb330a88bd6ad

To find out more about CSRF tokens see:

http://wiki.geeklog.net/CSRF_Protection

https://en.wikipedia.org/wiki/Cross-site_request_forgery

---

One of the Geeklog Core Developers.