CSRF Verification error when logging into slipmat.io

Help
#1

Hi all,
I’m getting an CSRF Verification error when logging into slipmat.io, I did add slipmat.io to the cookies in chrome and firefox but always get this error. Any ideas?

Thanks Pablo.

#2

Hi, you’re probably trying to log in with non-https address. Please make sure you have https in the URL before logging in and it should work :slight_smile:

2 Likes
#3

Hey,

Same problem here on iPhone/Safari/ios:

  • i put go toslipmat.io
  • i get the site with a warning
  • when go to login, and login, i get warning “CSRF Verification”

i read your backstage entry:

I think there’s a simple way the problem will not happen. (We have 400 Url’s and 3 dedicated servers, we work for all Url’s like this.)

Option 1: Server
in your server, Directadmin/Plesk/ect. you can force your http:// always go to https://

Option 2: Force your script to always use https:// in .htaccess

RewriteEngine On
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Both options can give an exclamation mark to the certificate in the bar at the URL, this is because there is content on the site that is external and the external link / image / video / ect. does not use https.

Hendrik