CSRF令牌附加到请求

I have an OpenCart shop running on two different servers (development and staging of the exact same site). On Server #1 everything is working as expected, but on Server #2 I'm all of a sudden seeing the parameter CSRF_TOKEN=xxxxxxx appended to various but not all URLs.

Where is this coming from???

For example, if I press the "Add to cart"-button jQuery throws the following exception: Error: Syntax error, unrecognized expression: ?CSRF_TOKEN=xxxxxxx

I'm also getting a bunch of other errors, all due to this mysterious CSRF_TOKEN. If I hover over certain links, I see the the CSRF_TOKEN as part of the URL but it's not in the source code but somehow ends up in client.

I´m running Apache version 2.2.29 and PHP 5.4.32. I have no idea where this is coming from or what to do about it - Any ideas on what is going on here?

写回答
好问题 0 提建议
追加酬金
关注问题
分享
邀请回答
编辑收藏删除结题
收藏举报

1条回答默认最新

关注

码龄粉丝数原力等级 --

被采纳

被点赞

采纳率
douye2572 2014-12-09 09:00
关注
My hosting provider confirmed that it was an security rule on the server causing the issue and helped me resolve it.

本回答被题主选为最佳回答 , 对您是否有帮助呢?

解决无用
评论打赏
分享
举报

评论

按下Enter换行，Ctrl+Enter发表内容

报告相同问题？

关注问题

CSRF令牌附加到请求 apache csrf php
2014-12-08 07:50

回答 1 已采纳 My hosting provider confirmed that it was an security rule on the server causing the issue and hel
CSRF令牌保护意义何在？ csrf php
2019-01-14 16:19

回答 2 已采纳 The CSRF token is random and unique per session. Hence, an attacker can get the value of this toke
Yii2 CSRF令牌时间段增加 csrf php
2018-04-02 12:24

回答 1 已采纳 You can use frontend and backend as different cookie and session Cookie Backend 'identityCookie'
防止跨站请求伪造（CSRF）
2020-08-10 06:47

culi3118的博客 Cross-site request forgery (CSRF) is a common and serious exploit where a user is tricked into performing an action he didn’t explicitly intend to do. This can happen when, for example, the user is ...
CSRF令牌不经时验证 csrf php
2014-05-22 23:51

回答 2 已采纳 This is just a wild guess, but could it be the combination of the Base64 encoding and submitting t
使用表单数据添加laravel CSRF令牌 javascript laravel php
2016-11-29 13:26

回答 3 已采纳 You should add a field named - _token, instead of csrfToken like this: data.append( "_token", Lar
Laravel csrf令牌与ajax POST请求不匹配 ajax jquery laravel php
2015-09-23 11:47

回答 11 已采纳 You have to add data in your ajax request. I hope so it will be work. data: { "_token": "
csrf跨站请求伪造_跨站请求伪造（CSRF）缓解—同步器令牌模式
2020-07-30 10:39

weixin_26722031的博客 csrf跨站请求伪造什么是CSRF Attack ..？ (What is CSRF Attack..?) A Cross-Site Request Forgery is also known as CSRF, one-click attack or session riding. This is a sort of assault whereby web site with...
是否应为每个请求包含csrf令牌？ csrf php
2012-04-04 05:50

回答 1 已采纳 CSRF tokens are only normally attached to things that change things on the users behalf (e.g. POST
从Golang Buffalo网络应用发送推文时，无法设置CSRF令牌 csrf
2019-04-12 12:17

回答 2 已采纳 After looking through the GoBuffalo docs, and in particular THIS part of the forms page, All i had
CSRF会话令牌无效 csrf php
2013-11-15 19:38

回答 1 已采纳 You're passing $token in as the first parameter for CSRF::check(). Surely, it should be: CSRF::ch
Laravel基础之CSRF保护
2020-11-07 18:44

crayon-shin-chan的博客 1.简介 Laravel使您可以轻松保护应用程序免受跨...每当您在应用程序中定义HTML表单时，都应在表单中包含一个隐藏的CSRF令牌字段，以便CSRF保护中间件可以验证请求。您可以使用@csrf Blade指令生成令牌字段： ...
错误“CSRF令牌无效。请尝试在Symfony3中重新提交表单 php symfony
2017-03-10 15:46

回答 1 已采纳 You should change this <button type="submit" name="form_name">Create</button> With
CSRF漏洞详解一文了解CSRF漏洞
2020-11-11 13:50

思源湖的鱼的博客本篇总结归纳CSRF漏洞
CSRF检测工具（XSRF检测工具）使用说明
2023-12-21 11:40

墨痕诉清风的博客添加Cookie-c或--cookies此选项可帮助您提供一个逗号分隔的外部自定义cookie列表，这些cookie将在所有请求期间使用。自定义用户代理此选项（）使能够提供自定义的用户代理值。请求超时--timeout7 seconds。
没有解决我的问题, 去提问

悬赏问题

¥15 如何在scanpy上做差异基因和通路富集？
¥20 关于#硬件工程#的问题，请各位专家解答！
¥15 关于#matlab#的问题：期望的系统闭环传递函数为G(s)=wn^2/s^2+2¢wn+wn^2阻尼系数¢=0.707，使系统具有较小的超调量
¥15 FLUENT如何实现在堆积颗粒的上表面加载高斯热源
¥30 截图中的mathematics程序转换成matlab
¥15 动力学代码报错，维度不匹配
¥15 Power query添加列问题
¥50 Kubernetes&Fission&Eleasticsearch
¥15 報錯：Person is not mapped，如何解決？
¥15 c++头文件不能识别CDialog

CSRF令牌附加到请求

1条回答 默认 最新

悬赏问题

1条回答默认最新