search

alexandregz / twofactor_gauthenticator

This RoundCube plugin adds the 2-step verification(OTP) to the login proccess
MIT License
221 stars 78 forks source link

PHP Error: Request security check failed #33

Open fsantiago07044 opened 9 years ago

fsantiago07044 commented 9 years ago

RC v1.1.2 Complete dev-master plugin version PHP v5.4.42 Centos 6.6 64-bit Apache v2.2.15

when logging in with 2FA turned on, it produces this error:

PHP Error: Request security check failed Warning: Cannot modify header information - headers already sent in /var/www/html/rc/plugins/twofactor_gauthenticator/twofactor_gauthenticator.php on line 325

If i check the option "remember my pc for 30 days", I get this similar error message:

PHP Error: Request security check failed Warning: Cannot modify header information - headers already sent in /var/www/html/rc/plugins/twofactor_gauthenticator/twofactor_gauthenticator.php on line 424 Warning: Cannot modify header information - headers already sent in /var/www/html/rc/plugins/twofactor_gauthenticator/twofactor_gauthenticator.php on line 325

and after, if i simply put the URL bar into focus and re-enter my same base url, it appears to have actually authenticated me and i reach my inbox screen. if i do a refresh (F5), it does not go in and produces the same error.

That's all I have. Thanks.

alexandregz commented 9 years ago

Hi @fsantiago07044

can you try to use skip-csrf branch, plz?

thx for feedback!

fsantiago07044 commented 9 years ago

I just tried it and same errors. all i did was overwrite my plugin files with the suggested branch. correct yes?

alexandregz commented 9 years ago

yes

tareqhi commented 8 years ago

same problem here. plz show me the solutions

alexandregz commented 8 years ago

With skip-csrf branch, the problem should not appear.

Do you are try git clone and git checkout skip-csrf? (not master, use the skip-csrf branch)