CSRF error

Got logged off apparently while composing and got the logon page after hitting "Submit". Filled it out, hit "Enter" and got the CSRF error page.

The time out and logpff while composing was fixed about 1-1/2 years ago and since then I never got logged off, even spending almost an hour composing. I _think_ the fix might have been hooked to the "compose window" being open but not sure. IAC, I got logged off after about (?) 15 minutes.

And then got the error page after logging back in. At that time the post I had tried to submit was not submitted. I had to re-submit it.

My browser tells me that (at least on the "compose" page) the page reloads all the time (I don't know the interval but the reload requests seem to stack up quickly). Might that have something to do w/this?


Just FWI.


Rufus

Rufus,

Based on what you said, what is clear for me is that your session was timed out (aka automatically logged out due to 'inactivity') while you were composing the post. My best guess is you have NOT chosen the "Log me on automatically each visit" checkbox in the log in form. So, the server automatically logs you out if it didn't receive a request from you for about 15 minutes.

My browser tells me that (at least on the "compose" page) the page reloads all the time (I don't know the interval but the reload requests seem to stack up quickly).

If there was something in the composer page that sends anything to our server, it would have prevented your session getting timed out. But I don't think we have something like that, at least AFAIK. Can you please show us a screenshot of what your browser tells you?

Let's see if I can attach... OK.

If it comes through alright look at the banner immediately above the pic of the girl. This is from FF and I've seen it various times elsewhere, most commonly when a page redirects. Usually hitting "Allow" causes the loading to continue as expected. This is the first instance I have noticed where it says "REloading". On clicking "Allow" the banner immediately disappears/reappears, either regenerating or exposing the next previous instance; it does this always. In other pages, when it advises of following a redirect link , clicking it causes loading to proceed and removes the banner. Doesn't seem to cause serious problems so I have ignored it while composing on Permies. Composing seems to go normally if I "Submit" w/in a few minutes.

I understand about the timeout. I had this issue a couple years ago and at that time some kind of change was implemented which fixed the problem for me completely. I'm afraid I don't know what it was; I don't believe it involved "auto signon". I have made a policy to never use that option and don't recall doing anything, much less that kind of security breach, to deal w/your compose window timeout. I think it was probably fixed from your end, but the details of kinda lost in the mists.


Thanks for you attention.

Rufus