Access Denied: Possible Csrf Attack

General General Questions
1

Hi,

I've just installed trial version for client to try before purchasing but receiving following error when trying to upload a banner:

rAccess denied: Possible CSRF attack

how can this be fixed please?

2

Hi,

I've just installed trial version for client to try before purchasing but receiving following error when trying to upload a banner:

rAccess denied: Possible CSRF attack

how can this be fixed please?

Try to increase the max_input_vars setting on your server.

3

Try to increase the max_input_vars setting on your server.

do you have an idiots guide on on how to do this please?

4

do you have an idiots guide on on how to do this please?

You can add this:

php_value max_input_vars 1000

to .htaccess file. To verify that the new setting is active, create a PHP test file that contains the following code in the root directory of your store:



Also you can find max_input_vars in php.ini file and change the value.
5

Thanks for that..all sorted.... :-)

6

Thanks for that..all sorted.... :-)

You are welcome:)

7

This solution didn't help me. I changed this line in config.local.php instead.

'anti_csrf' => false, // protect forms from CSRF attacks

8

I would suspect you have a session save/storage issue and that youpre probably running on a shared server.. The csrf checks look for a value in your session and if it doesn't match what it expects, it sees this as an attack