<< Back
Message for this thread
Posted by Messages text
Shacklock Kevin

Noavatar
Total post : 30
> Profile
Written on : 27/08/2010 15:07 ( more than one month )
Object : Security issue, the request seem invalid !
Applied the patch (lms_test_3604.zip) and changed file permissions to 755 but still get the following error when attempting to apply time limit to questions?
Security issue, the request seem invalid ! Try a new login and retry. [logout]
 
Derks Giovanni

Avatar
Total post : 1861
> Profile
Written on : 06/09/2010 15:53 ( more than one month )
Object : Re: Security issue, the request seem invalid !

hello,
after applying that patch did you also applied the "Generic security issue errors" one?

bye,
Giovanni.

Docebo Staff
 - Docebo 4 released! -

 
Shacklock Kevin

Noavatar
Total post : 30
> Profile
Written on : 14/09/2010 17:33 ( more than one month )
Object : Re: Security issue, the request seem invalid !
Hi Giovanni,
Yes I definately did apply it.
 
Derks Giovanni

Avatar
Total post : 1861
> Profile
Written on : 15/09/2010 18:34 ( more than one month )
Object : Re: Security issue, the request seem invalid !
Hello,
this sound strange, the "generic" one should solve almost all that kind of problems, but I'll check again and let you know, thanks.

bye,
Giovanni.

Docebo Staff
 - Docebo 4 released! -

 
H Psv

Avatar
Total post : 27
> Profile
Written on : 12/01/2011 20:14 ( more than one month )
Object : Re: Security issue, the request seem invalid !
Hi,

after having applied both patches I still have this problem :

- "security issue" when trying to modify test time by question.

I must use 3.6.0.4 for cms use.
Has any patch been released for this problem?
Message modified by : PsvH on : 12/01/2011 20:52
 
H Psv

Avatar
Total post : 27
> Profile
Written on : 12/01/2011 22:15 ( more than one month )
Object : Re: Security issue, the request seem invalid !
It works by adding "Authenticate::getSignatureHiddenField('my_id')" around line 1286 in test.php ;

$GLOBALS['page']->add('</fieldset>'
        .'<div class="set_time_row">'
            .'<input type="hidden" name="previous_time" value="'.$effective_time.'">'
            .str_replace('[time_difference]', $time_difference, $lang->def('_QUEST_TM2_DIFFERENCE_FROM_PREVIOUS'))
            .'&nbsp;&nbsp;&nbsp;'
            .'</div><div class="align_right"><br>'
            .Authenticate::getSignatureHiddenField('my_id')
            .'<input class="button_nowh" type="submit" name="settime" value="Appliquer les modifications" />'
            .Authenticate::getSignatureHiddenField('my_id')
        //.'<br />'
        //.'<div class="align_right">'
            .'<input class="button" type="submit" name="saveandexit" value="'.$lang->def('_SAVE').'" />'
            .Authenticate::getSignatureHiddenField('my_id')
        .getBackUi('index.php?modname=test&amp;op=modtestgui&amp;idTest='.$idTest.'&amp;back_url='.$url_coded, $lang->def('_BACK'))
        //.'</div>'
        .'</form>'
        .'</div>', 'content');


 
Derks Giovanni

Avatar
Total post : 1861
> Profile
Written on : 14/01/2011 14:47 ( more than one month )
Object : Re: Security issue, the request seem invalid !
Hi,
thanks for post your solution and reporting this!

It is enough if you insert that line once inside the <form> </form> block.

bye,
Giovanni. 

p.s.
after checking it, I don't think you have the latest patch applied as my line 1183,1184 are as following:

.'<form method="post" action="index.php?modname=test&amp;op=modassigntime">'
.Authenticate::getSignatureHiddenField('modassigntime')

Please check that you have applied this patch too and compare the content of doceboLms/modules/test/test.php with your own. 

Note that you have to apply only the patches released for your version of the platform (3.6.0.4) and that you have to apply them starting from the oldest to the newest.
Message modified by : giovanni.derks on : 14/01/2011 14:55

Docebo Staff
 - Docebo 4 released! -

 
H Psv

Avatar
Total post : 27
> Profile
Written on : 15/01/2011 16:34 ( more than one month )
Object : Re: Security issue, the request seem invalid !
Ok I'll check, thanks !
 
<< Back