Forum

Hi,

I'm not sure if this is my bug or yours.
I'm getting this XSRF message in my action log file:
XSRF attempt from http://abc.dyndns.org:8888/admin blocked

I also logged the following variables:
$_SERVER["HTTP_Host"] = abc.dyndns.org
$referer_host = abc.dyndns.org:8888

It appears that the non-standard port number is confusing the XSRF detection, but I could be wrong.

Any ideas?

Thanks,

E.

Banshee version: 3.2
PHP version: 5.3.2
MySQL version: 14.14
Webserver: Hiawatha 6.17.1

Try adding the following line to prevent_csrf() in libraries/security.php. Place it below the existing list() call.

list($referer_host) = explode(":", $referer_host);

Thanks for the quick reply!

That worked for me.

-E