Hi there,

I've created a closed survey with tokens and invited some people. I can see responses coming in, but one user emailed me that he cannot login. The error he got:

-- begin error --
Bad request.
The CSRF token could not be verified.

The request could not be understood by the server due to malformed syntax. Please do not repeat the request without modifications.
If you think this is a server error, please contact the webmaster.
-- end error --

Can someone explain to me what is going on here?

Hi,

For security, we enable Cross-site Request Forgery Prevention from Yii .

There are a crsf token in the $_SESSION and same crsf token in the HTML page (in a hidden input).

It work, but can break in some condition : user deactivate all cookies , even $_SESSION cookies : see bug : bugs.limesurvey.org/view.php?id=9093