Alanaktion / phproject

A high performance full-featured project management system
https://www.phproject.org
GNU General Public License v3.0
384 stars 106 forks source link

Bad Request on New Sprint #399

Closed juri117 closed 3 years ago

juri117 commented 3 years ago

After upgrading to v1.7.10 i get a bad request when creating a new Sprint.

Reproduce: click on "New" -> "Sprint"

400 Bad Request

Invalid CSRF token

[C:/portable/UwAmp/www/phproject/app/helper/security.php:141] Base->error()
[C:/portable/UwAmp/www/phproject/app/controller.php:100] Helper\Security->validateCsrfToken()
[C:/portable/UwAmp/www/phproject/app/controller/admin.php:652] Controller->validateCsrf()
[C:/portable/UwAmp/www/phproject/vendor/bcosca/fatfree-core/base.php:1960] Controller\Admin->sprint_new()
[C:/portable/UwAmp/www/phproject/vendor/bcosca/fatfree-core/base.php:1759] Base->call()
[C:/portable/UwAmp/www/phproject/index.php:155] Base->run()

(0.7ms) SELECT attribute,value FROM config
(1.9ms) SHOW TABLES LIKE 'release'
(0.7ms) SELECT `id`,`token`,`ip`,`user_id`,`created` FROM `session` WHERE token = '63a0f18218e32d7755e0e544b2aa3953b3eaf28bc6b701bb0810db077843b03d'
(0.7ms) SELECT `id`,`username`,`email`,`name`,`password`,`salt`,`reset_token`,`role`,`rank`,`task_color`,`theme`,`language`,`avatar_filename`,`options`,`api_key`,`api_visible`,`created_date`,`deleted_date` FROM `user` WHERE id = 1 AND deleted_date IS NULL
(0.3ms) [CACHED] SELECT `id`,`name`,`role`,`default_description` FROM `issue_type`

Please let me know if you need more information

Alanaktion commented 3 years ago

Oof, I guess that was inevitable when I changed basically everything in one commit 😅

I'll get this fixed and do a more thorough review of everything, then publish a new release.

juri117 commented 3 years ago

Awesome, thank you :D