BlackCatDevelopment / BlackCatCMS

BlackCat CMS is a PHP5, HTML5 content management system
https://blackcat-cms.org
Other
11 stars 9 forks source link

Session timeout CSRF problem #323

Closed webbird closed 4 years ago

webbird commented 9 years ago

See also: #304

We have added a better session handling in BC v1.2 that helps to avoid data loss. But there's a known bug: If the open page contains a form - what means it also contains a CSRF token - there will be a "CRSF token timeout" message (Javascript Popup) if the session ends. If the user closes this, the page is reloaded without new login.