GLPI Form Error: The action you have requested is not allowed

orozcopablo · 2023-12-05 22:02:45

Hi, we created a form in GLPI for users to make internal complaints. This form is anonymous, so users do not have to be logged in to the platform.

In several tests, it works correctly with browsers like Chrome, Firefox, etc. But on other random occasions, we receive the error "The action you have requested is not allowed" and it does not allow us to send the form.

Once you receive this error in the browser, whether on a PC, Mac, or mobile device (Android/iPhone), it will not allow you to send more from the same device/browser. Using another browser or incognito mode works correctly.

Has anyone ever had this happen to them?

cconard96 · 2023-12-06 01:57:49

Try clearing the browser cache. If you have an up to date GLPI version, check the GLPI access-errors log in the files/_log folder to see if there is more information.

orozcopablo · 2023-12-06 13:02:51

Hi,

Thank you for your reply. We have found that clearing the cookies usually fixes the problem, but it randomly occurs again. In incognito/private mode, it works without any problems. We have checked the access-errors file in the _log folder and found the following:

CSRF check failed for User ID: at /2023-12-06 10:30:07 [@]
CSRF check failed for User ID: at /marketplace/formcreator/ajax/showfields.php2023-12-06 10:30:09 [@]
CSRF check failed for User ID: at /marketplace/formcreator/ajax/showfields.php2023-12-06 10:30:11 [@]
CSRF check failed for User ID: at /marketplace/formcreator/ajax/showfields.php2023-12-06 10:30:14 [@]
CSRF check failed for User ID: at /marketplace/formcreator/ajax/formanswer.php2023-12-06 10:47:34 [@]
CSRF check failed for User ID: at /marketplace/formcreator/ajax/showfields.php2023-12-06 10:47:35 [@]
CSRF check failed for User ID: at /marketplace/formcreator/ajax/showfields.php2023-12-06 10:47:37 [@]
CSRF check failed for User ID: at /marketplace/formcreator/ajax/showfields.php2023-12-06 10:47:37 [@]
CSRF check failed for User ID: at /marketplace/formcreator/ajax/formanswer.php

cconard96 · 2023-12-07 17:31:20

CSRF errors are usually caused by trying to submit a form/POST data to the server that was loaded for 2 hours or longer (loading a ticket for example, waiting 2 hours, and then trying to add a task to it without refreshing the page first).

Forum GLPI-Project

Announcement

#1 2023-12-05 22:02:45

GLPI Form Error: The action you have requested is not allowed

#2 2023-12-06 01:57:49

Re: GLPI Form Error: The action you have requested is not allowed

#3 2023-12-06 13:02:51

Re: GLPI Form Error: The action you have requested is not allowed

#4 2023-12-07 17:31:20

Re: GLPI Form Error: The action you have requested is not allowed

Board footer