Is there a list of suggested CSRF routes to add to the security option I have tried looking through the upgrade info and base forum info but can't find anything.
In Security
Share this post:
Responses (7)
-
Accepted Answer
It sounds to me that you have several failed updates, and should have reverted to your backup, before trying again. Because now you most likely have missing database updates etc., which can be tricky for you to fix on your own.
The update problems is most likely related to your hosting.
If you add your system info, and the update steps taken (version to version, and where it failed first time), some kind soul might be able to help you. Else you might need to rebuild your store, and in future be careful taking backups etc.
https://arastta.org/docs/user-manual/tools/system-information -
Accepted Answer
-
Accepted Answer
When I go into the security setting there is nothing in the CSRF routes field. When I add the list in that you have suggested I get a "Warning: Please check the form carefully for errors!" message at the top of the screen.
And I am still getting a "Warning: in_array() expects parameter 2 to be array, null given in (...catalog event app csrf.php) on line 27" at the top of all of my pages as well as during checkout.
For whatever reason I also had issues with the upgrade to 1.5. It seems like it partially updates and then doesn't update. For upgrading to 1.6 I remember it coming up with an error that the upgrade could not be completed then I ran it again and it said that the upgrade was successfully installed.
I had to remove the / out of the paths to allow the post to go nthrough -
Accepted Answer
What exactly do you mean, is the routes field empty?
Did you delete them?
By default the suggested routes is added for a new/updated store, as you can see if you install a demo/test site, where you also can see that the checkout indeed works fine.
account/address/edit
account/edit
account/newsletter
account/password
affiliate/edit
affiliate/password
affiliate/payment
Maybe you in feature could be kind and post all relevant info directly, and not one by one sentence per post. -
Accepted Answer
-
Accepted Answer
Your Reply
Please login to post a reply
You will need to be logged in to be able to post a reply. Login using the form on the right or register an account if you are new here.
Register Here »