CSRF令牌附加到请求

I have an OpenCart shop running on two different servers (development and staging of the exact same site). On Server #1 everything is working as expected, but on Server #2 I'm all of a sudden seeing the parameter CSRF_TOKEN=xxxxxxx appended to various but not all URLs.

Where is this coming from???

For example, if I press the "Add to cart"-button jQuery throws the following exception: Error: Syntax error, unrecognized expression: ?CSRF_TOKEN=xxxxxxx

I'm also getting a bunch of other errors, all due to this mysterious CSRF_TOKEN. If I hover over certain links, I see the the CSRF_TOKEN as part of the URL but it's not in the source code but somehow ends up in client.

I´m running Apache version 2.2.29 and PHP 5.4.32. I have no idea where this is coming from or what to do about it - Any ideas on what is going on here?

写回答
好问题 0 提建议
追加酬金
关注问题
分享
邀请回答
编辑收藏删除结题
收藏举报

1条回答默认最新

关注

码龄粉丝数原力等级 --

被采纳

被点赞

采纳率
douye2572 2014-12-09 09:00
关注
My hosting provider confirmed that it was an security rule on the server causing the issue and helped me resolve it.

本回答被题主选为最佳回答 , 对您是否有帮助呢?

解决无用
评论打赏
分享
举报

评论

按下Enter换行，Ctrl+Enter发表内容

报告相同问题？

关注问题

CSRF令牌附加到请求 apache csrf php
2014-12-08 07:50

回答 1 已采纳 My hosting provider confirmed that it was an security rule on the server causing the issue and hel
CSRF令牌保护意义何在？ csrf php
2019-01-14 16:19

回答 2 已采纳 The CSRF token is random and unique per session. Hence, an attacker can get the value of this toke
Yii2 CSRF令牌时间段增加 csrf php
2018-04-02 12:24

回答 1 已采纳 You can use frontend and backend as different cookie and session Cookie Backend 'identityCookie'
防止跨站请求伪造（CSRF）
2020-08-10 06:47

culi3118的博客 Cross-site request forgery (CSRF) is a common and serious exploit where a user is tricked into performing an action he didn’t explicitly intend to do. This can happen when, for example, the user is ...
CSRF令牌不经时验证 csrf php
2014-05-22 23:51

回答 2 已采纳 This is just a wild guess, but could it be the combination of the Base64 encoding and submitting t
使用表单数据添加laravel CSRF令牌 javascript laravel php
2016-11-29 13:26

回答 3 已采纳 You should add a field named - _token, instead of csrfToken like this: data.append( "_token", Lar
Laravel csrf令牌与ajax POST请求不匹配 ajax jquery laravel php
2015-09-23 11:47

回答 11 已采纳 You have to add data in your ajax request. I hope so it will be work. data: { "_token": "
csrf跨站请求伪造_跨站请求伪造（CSRF）缓解—同步器令牌模式
2020-07-30 10:39

weixin_26722031的博客 csrf跨站请求伪造什么是CSRF Attack ..？ (What is CSRF Attack..?) A Cross-Site Request Forgery is also known as CSRF, one-click attack or session riding. This is a sort of assault whereby web site with...
是否应为每个请求包含csrf令牌？ csrf php
2012-04-04 05:50

回答 1 已采纳 CSRF tokens are only normally attached to things that change things on the users behalf (e.g. POST
从Golang Buffalo网络应用发送推文时，无法设置CSRF令牌 csrf
2019-04-12 12:17

回答 2 已采纳 After looking through the GoBuffalo docs, and in particular THIS part of the forms page, All i had
CSRF会话令牌无效 csrf php
2013-11-15 19:38

回答 1 已采纳 You're passing $token in as the first parameter for CSRF::check(). Surely, it should be: CSRF::ch
Laravel基础之CSRF保护
2020-11-07 18:44

crayon-shin-chan的博客 1.简介 Laravel使您可以轻松保护应用程序免受跨...每当您在应用程序中定义HTML表单时，都应在表单中包含一个隐藏的CSRF令牌字段，以便CSRF保护中间件可以验证请求。您可以使用@csrf Blade指令生成令牌字段： ...
错误“CSRF令牌无效。请尝试在Symfony3中重新提交表单 php symfony
2017-03-10 15:46

回答 1 已采纳 You should change this <button type="submit" name="form_name">Create</button> With
CSRF漏洞详解一文了解CSRF漏洞
2020-11-11 13:50

思源湖的鱼的博客本篇总结归纳CSRF漏洞
CSRF检测工具（XSRF检测工具）使用说明
2023-12-21 11:40

墨痕诉清风的博客添加Cookie-c或--cookies此选项可帮助您提供一个逗号分隔的外部自定义cookie列表，这些cookie将在所有请求期间使用。自定义用户代理此选项（）使能够提供自定义的用户代理值。请求超时--timeout7 seconds。
没有解决我的问题, 去提问

悬赏问题

¥15 运动想象脑电信号数据集.vhdr
¥15 三因素重复测量数据R语句编写，不存在交互作用
¥15 微信会员卡等级和折扣规则
¥15 微信公众平台自制会员卡可以通过收款码收款码收款进行自动积分吗
¥15 随身WiFi网络灯亮但是没有网络，如何解决？
¥15 gdf格式的脑电数据如何处理matlab
¥20 重新写的代码替换了之后运行hbuliderx就这样了
¥100 监控抖音用户作品更新可以微信公众号提醒
¥15 UE5 如何可以不渲染HDRIBackdrop背景
¥70 2048小游戏毕设项目

CSRF令牌附加到请求

1条回答 默认 最新

悬赏问题

1条回答默认最新