INVALID SESSIONS

  • Resolved dlclark

    (@dlclark)


    9 years, 4 months ago

    Classified Ad users on our website were getting INVALID SESSIONS. I found a support thread, advocating commenting out the code providing the error messages in your ajax.php

    function adverts_gallery_upload()
    function adverts_gallery_update()
    function adverts_gallery_update_order()
    function adverts_gallery_delete()

    each of these functions is performing the following check:
    if( ! check_ajax_referer( ‘adverts-gallery’, ‘_ajax_nonce’, false ) ) {

    QUESTION: how do I make this a more permanent fix, seems like updating WPADVERTS version may undo this patch.

    Regards,

    Daryl()

Viewing 1 replies (of 1 total)
  • Plugin Author Greg Winiarski

    (@gwin)

    9 years, 4 months ago

    To make a permanent fix you would need to troubleshoot why sessions are not working on your site, removing check_ajax_referer() makes your website vulnerable CSRF attacks.

    In order to troubleshoot disable on your site plugins one by one and see when and if the problem goes away, if not then try switching a theme for a while and check again.

Viewing 1 replies (of 1 total)

The topic ‘INVALID SESSIONS’ is closed to new replies.