April 9, 20179 yr Hi Everyone, First, I've read through the other threads this topic, but I haven't really found a solution. I used to see the occasional "wrong csrf_token" message pop up in my log. Now, it's practically taking over. My log is flooded with the messages, all day long, without end, for multiple plugins. I've tried uninstalling them and reinstalling. No change... Diagnostics are attached. Any help would be greatly appreciated tower-diagnostics-20170409-0853.zip
April 9, 20179 yr Do you have anything at all anywhere that might have a connection to your server? Controlr or Margarita on your phone?
April 9, 20179 yr 1 minute ago, newoski said: No. I just log in via web browser and putty And there are no browsers or putty sessions anywhere (including phone) that haven't been completely closed? Phones for example often keep things partly running unless you go to the trouble to stop them or reboot the phone.
April 9, 20179 yr 32 minutes ago, newoski said: I've tried uninstalling them and reinstalling. No change... Doesn't matter how much you do this (or restarting server)... Won't make a difference 22 minutes ago, trurl said: Does it happen if you boot unRAID in SAFE mode? Would probably make the errors go away, but safe mode would only mask the problem. Once booted back into normal mode they would start appearing again. 28 minutes ago, newoski said: No. I just log in via web browser and putty Like trurl stated, this is 100% caused by browser sessions (or controlR / margarita on a phone) that have been started but not closed and the server has been rebooted. You do have a browser tab open somewhere on some device / computer somewhere on your network that was opened prior to a reboot of the server and never closed or refreshed / reloaded. This is pretty much the only cause of wrong_csrf errors.
April 9, 20179 yr Author 2 minutes ago, Squid said: Doesn't matter how much you do this (or restarting server)... Won't make a difference Would probably make the errors go away, but safe mode would only mask the problem. Once booted back into normal mode they would start appearing again. Like trurl stated, this is 100% caused by browser sessions (or controlR / margarita on a phone) that have been started but not closed and the server has been rebooted. You do have a browser tab open somewhere on some device / computer somewhere on your network that was opened prior to a reboot of the server and never closed or refreshed / reloaded. This is pretty much the only cause of wrong_csrf errors. Thanks. Closing ALL instances of Chrome that had access to the GUI page on ALL devices, stopped the ongoing log entries. This seems like a really bad source of a syslog spamming issue, but if it's for security precautions, I guess it makes sense. Thanks so much!!
Archived
This topic is now archived and is closed to further replies.