Recent Topics

1 Nov 06, 2010 01:02    

Since upgrading to V4.0.1-beta if I update an item I receive the following error:

Incorrect crumb received! [item]

Your request was stopped for security reasons.

Have you waited more than 2 hours before submitting your request?

Please go back to the previous page and refresh it before submitting the form again.

Did not have the issue in prior versions. Any idea as to where I should look

2 Nov 06, 2010 21:35

Have you waited more than 2 hours before submitting your request?

Do you compose posts over 2 hours? Just reload the page or switch view (simple/expert) before saving a post.

3 Nov 06, 2010 22:10

I am the administrator. This was amending a post that I have not touched for weeks. In previous versions eg V3.3.3 and running back to 2.x I have not struck this issue. In other sites that I have tested V4.0.1-beta on, I do not get this message for the same action, hence it needs to be a setting or a server issue.

Also, as administrator, I do need to access quickly if there is an edit issue.

4 Nov 07, 2010 03:14

This feature was added in v4. Any form must be submitted within 2 hours after opening. This increases security and protects your blog.
More info here http://manual.b2evolution.net/Crumbs

It doesn't matter if you're an admin or a basic user.

Again, if you see that error message, it means that you've waited over 2 hours before submitting a form. Just reload a page before submitting it.

5 Nov 07, 2010 06:06

Like to say it works, but cannot. Previously had followed the direction on refresh or hitting the 'Resubmit Now!' button does not change anything - it just returns the same error - a continual loop!
Thoughts!

6 Nov 07, 2010 06:56

Can you give a link to your blog?

9 Nov 11, 2010 05:07

Sorry to say, despite our best intentions we are in the wrong place to resolve this. I did a complete new install from fresh with a new database etc - in effect create a new blog. Problem persists. It will not even allow may to change the admin password on start-up - the error message I receive is "Incorrect crumb received! [user] etc".

This has to be about a setting outside of B2 on the server. I am on:
PHP V5.2.13
Mysql:5.0.90

However, unlike other installations it is telling me the PHP as (user) and (Group) is unknown - is this a lead to something?

10 Nov 11, 2010 13:07

However, unlike other installations it is telling me the PHP as (user) and (Group) is unknown - is this a lead to something?

Not really, that just means that the php_posix extension is not installed (or you are on a Windows server). Did you, by any chance, recently upgrade to PHP 5.2?

11 Nov 23, 2010 17:03

I've got this problem, too. I upgraded to v4 beta and now I can't post any comments. I thought it was my customized skin, but I switched to stock skin and I get the same issue.

When I view source I see the crumb as a hidden input. But htsrv/comment_post.php isn't liking it. Here's a url:

http://personman.com/priorities

EDIT: If you test the link above you'll find that it works. This is just because I edited the assert_received_crumb() definition and had it return true in all cases. I'd still like to be able to use this feature if I can get it to work.

12 Nov 23, 2010 21:03

Do you use page cache with delay time over 2 hours?
I guess we should make those crumbs optional.

13 Nov 23, 2010 21:33

Better still ... only release stable versions ++ "testing version"? Unlike current stable/dev options of 3.x (testing?) && 4.x(cutting edge bugs?)

Wb Danny, sorry your visit was prompted by a VPS failure with core code :(

¥

14 Nov 23, 2010 21:43

4.x(cutting edge bugs?)

I don't agree here. v4 does have small bugs, but it generally works pretty good. I run it on several production websites.

15 Nov 24, 2010 23:51

3.x still has "small" bugs ... do you consider that stable?

Take a look at the developer list and ask yourself "is evo moving forward"

Don't get me wrong, great code ( waaaaaaay beyond wp crap ), and I appreciate the time and effort that has gone into it, especially since a tad of that time and code was my own yeah?, but recent evo is crap, bloated, has spyware (although it's opt-out *if* you know how) and has more spam links than my favourite porn sites

You might be happy with that, I'm not

¥


Form is loading...