[SOLVED] Bad CSRF in forum login page

Succulent of your garden · 2026-08-02 12:09:58

Today I just login instantly. Hope the fix solve the issue. But I think it needs more observations in time.

During this week I have it a few times by the way.But not too much as when the issue started.

It is possible to view the commit of the change ? if that's the case can someone post it please ? ^^

If I saw the error again I will let you know over here

Thanks for the fixing ^^

Last edited by Succulent of your garden (2026-08-02 12:10:35)

Antiz · 2026-08-02 12:13:52

Succulent of your garden wrote:

Today I just login instantly. Hope the fix solve the issue. But I think it needs more observations in time.
During this week I have it a few times by the way.But not too much as when the issue started.
It is possible to view the commit of the change ? if that's the case can someone post it please ? ^^
If I saw the error again I will let you know over here
Thanks for the fixing ^^

Here's the commit https://gitlab.archlinux.org/archlinux/ … cb54358dba

Related discussion in the MR happens here: https://gitlab.archlinux.org/archlinux/ … ote_482547

tekstryder · 2026-08-02 18:15:57

Edit: Didn't see further replies with the commit and MR before posting. Derp.

Last edited by tekstryder (2026-08-02 18:17:03)

mpan · 2026-08-05 16:00:17

3 days later and I experienced no trouble so far. I had streaks of successful logins before, but more and more it appears to be fixed. Nobody else complained too.

Thank you, Antiz! I hope there is no unreasonable, negative impact on the load-reducing measures.

Lone_Wolf · 2026-08-08 15:55:46

Login takes a bit longer (probably because the not cached stuff needs to be written?) then before but has been succesfull every time this week.

I rather wait 2-5 seconds for a succesfull login then get a response in less then a second that fails most of the time.

Thanks for looking at this.

5hridhyan · 2026-08-08 16:43:13

Lone_Wolf wrote:

Login takes a bit longer

I actually counted it. For me its about ~10 seconds. And yes all "Successful" logins

Succulent of your garden · 2026-08-15 12:20:49

Well after two weeks of nobody complaining and at least over this post we have many buddies from different continents around the world, so I think we can say that preliminary it was fixed. I say preliminary just because of the few time lapse of two weeks, but it seems that is totally solved in every sense ^^

Thanks so much for the fixing the issue Antiz. Hope someday I could grow up and also help in fixing these kind of issues

As for this thread, what should we do ? We close the thread or give it a little more time for just be sure that nobody is having the issue again for some reasons ? I guess this is a question for the Admins of the forum to be honest. Just I think that this thread should be somewhere so by any chance it can be quoted in the future by some reason.

Last edited by Succulent of your garden (2026-08-15 12:21:44)

Lone_Wolf · 2026-08-15 12:57:49

Moderator Note

Succulent of your garden wrote:

As for this thread, what should we do ? We close the thread or give it a little more time for just be sure that nobody is having the issue again for some reasons ? I guess this is a question for the Admins of the forum to be honest. Just I think that this thread should be somewhere so by any chance it can be quoted in the future by some reason.

As Opening Poster you decide when its time to mark this as solved, not mods/admins .

To make it easier to find when the same error pops up again (hopefully never) please change the title to reflect the error message mentioned Bad CSRF.

Succulent of your garden · 2026-08-15 14:08:54

Okey. But I think let's change the title when I close the thread.

I think one month should be more than enough to check. I think also probably someone would like to discuss the delay that now have when you log in. I notice that the first time was less [ But maybe I'm kinda autosuggestioning myself]. I can totally live with that delay 100% everyday in my life, but maybe someone could have the courage and time to solve it and add it to the current solution.

Since the delay after putting the user and psswd seems to be a general issue to all users, I think that is probably a good idea to kept this thread open at least a month. If nobody post in that time frame then I will put the solved tag and probably ask a proper name and place in the forum to find and quote it in the future.

Last edited by Succulent of your garden (2026-08-15 14:09:44)

Succulent of your garden · 2026-09-16 20:05:14

So a month has been going on and everything is working fine thanks for the solution of Antiz ^^

So probably I going to change the name of the post and mark it as solved.

is this one okey for finding it in the future more easily for quoting ?: Bad CSRF in forum login page.

As for me sounds okey for a title of this thread. But let me know if you are okey with it.

Lone_Wolf · 2026-09-17 08:31:55

Yup, looks good.

Succulent of your garden · 2026-09-17 14:09:30

done

5hridhyan · 2026-09-19 12:07:15

Didn't know I'd need to retry clicking logout multiple times, just like I was doing with the login

Ruhanilinks · Today 09:33:17

I’ve seen similar login issues where the password is correct but the site still returns an incorrect-password message. If resetting the browser fixed it, I’d suspect something cached or a stale session/cookie before assuming the password itself was the problem.

The Firejail/Wayland setup could potentially be involved too, especially if the browser is restricting or isolating some session data. It would be interesting to see if the issue happens again in a fresh browser profile or another browser.

Ruhanilinks · Today 09:35:21

Erus_Iluvatar wrote:

Got the same issue going from the index to the login page, starting at the login page directly worked, the error message was:
Bad CSRF hash. You were referred to this page from an unauthorized source.

Yeah, that sounds like it could be a session or redirect issue rather than an actual password problem. Interesting that going directly to the login page worked while reaching it through the index caused the error. That makes me think something on the site's login flow may have been acting up temporarily.

Succulent of your garden · Today 10:11:01

Hey the problem has been already solved, it wasn't a browser/wayland issue or anything else, it was a backend thing with the nginx conf:

You can see the solution in this links that Antiz provided with the fix of himself:

Antiz wrote:

Here's the commit https://gitlab.archlinux.org/archlinux/ … cb54358dba
Related discussion in the MR happens here: https://gitlab.archlinux.org/archlinux/ … ote_482547

Last edited by Succulent of your garden (Today 10:13:15)

Arch Linux

#26 2026-08-02 12:09:58

Re: [SOLVED] Bad CSRF in forum login page

#27 2026-08-02 12:13:52

Re: [SOLVED] Bad CSRF in forum login page

#28 2026-08-02 18:15:57

Re: [SOLVED] Bad CSRF in forum login page

#29 2026-08-05 16:00:17

Re: [SOLVED] Bad CSRF in forum login page

#30 2026-08-08 15:55:46

Re: [SOLVED] Bad CSRF in forum login page

#31 2026-08-08 16:43:13

Re: [SOLVED] Bad CSRF in forum login page

#32 2026-08-15 12:20:49

Re: [SOLVED] Bad CSRF in forum login page

#33 2026-08-15 12:57:49

Re: [SOLVED] Bad CSRF in forum login page

#34 2026-08-15 14:08:54

Re: [SOLVED] Bad CSRF in forum login page

#35 2026-09-16 20:05:14

Re: [SOLVED] Bad CSRF in forum login page

#36 2026-09-17 08:31:55

Re: [SOLVED] Bad CSRF in forum login page

#37 2026-09-17 14:09:30

Re: [SOLVED] Bad CSRF in forum login page

#38 2026-09-19 12:07:15

Re: [SOLVED] Bad CSRF in forum login page

#39 Today 09:33:17

Re: [SOLVED] Bad CSRF in forum login page

#40 Today 09:35:21

Re: [SOLVED] Bad CSRF in forum login page

#41 Today 10:11:01

Re: [SOLVED] Bad CSRF in forum login page

Board footer