Magento 1.9 Invalid Secret Key. Please refresh the pageSecurity Patch SUPEE-10266 - Possible issues?What is...
Changing the laptop's CPU. Should I reinstall Linux?
Is there any risk in sharing info about technologies and products we use with a supplier?
What is the difference between "...", '...', $'...', and $"..." quotes?
How do you voice extended chords?
What will happen if Parliament votes "no" on each of the Brexit-related votes to be held on the 12th, 13th and 14th of March?
Bash script to truncate subject line of incoming email
Decision problem that can be verified but not run in n^2 time
Play Zip, Zap, Zop
Do authors have to be politically correct in article-writing?
Is "the fire consumed everything on its way" correct?
Non-Cancer terminal illness that can affect young (age 10-13) girls?
How can the probability of a fumble decrease linearly with more dice?
How much mayhem could I cause as a fish?
What happens when I Twin Life Transference?
What is the difference between rolling more dice versus fewer dice?
How to visualize the Riemann-Roch theorem from complex analysis or geometric topology considerations?
What is a good reason for every spaceship to carry a weapon on board?
How to assess the long-term stability of a college as part of a job search
Current across a wire with zero potential difference
Existence of Riemann surface, holomorphic maps
In Linux what happens if 1000 files in a directory are moved to another location while another 300 files were added to the source directory?
I have trouble understanding this fallacy: "If A, then B. Therefore if not-B, then not-A."
Why are all my replica super soldiers young adults or old teenagers?
How can I play a serial killer in a party of good PCs?
Magento 1.9 Invalid Secret Key. Please refresh the page
Security Patch SUPEE-10266 - Possible issues?What is the importance of Security KeyError - Invalid Form KeyMagento admin login Error : invalid form key. please refresh the pageInvalid Form Key. Please refresh the pageMagento admin login Invalid Form Key. Please refresh the page in Ubuntu“invalid form key. please refresh the page” - cannot login to admin panelInvalid Form Key. Please refresh the page, admin loginMagento Patch: 9767 after install admin show Invalid Form KeyInvalid Form Key. Please refresh the page. Magento 1.9.3.8Admin grid is redirecting to dashboard
After new magento 1.9 installation when I am login to the admin panel there is a fine flow.
After that if I am opening admin panel on other tab like:
www.example.com/admin
It is showing error on dashboard
Invalid Secret Key. Please refresh the page.
magento-1.9 admin dashboard
asked Oct 24 '17 at 6:58
Shoaib MunirShoaib Munir
1,371524
|
show 3 more comments
After new magento 1.9 installation when I am login to the admin panel there is a fine flow.
After that if I am opening admin panel on other tab like:
www.example.com/admin
It is showing error on dashboard
Invalid Secret Key. Please refresh the page.
magento-1.9 admin dashboard
asked Oct 24 '17 at 6:58
Shoaib MunirShoaib Munir
1,371524
First of all enable formkey validation. Then check web/cookie/cookie_domain and web/cookie/cookie_path to either be correct or empty
– Yiorgos Moschovitis
Oct 24 '17 at 8:03
formkey validation is enabled. web/cookie/cookie_domain set to mydomain.com web/cookie/cookie_path set to / But still facing error
– Shoaib Munir
Oct 24 '17 at 10:11
1
Can you post the settings you have at General/Web/Session Cookie Management and General/Web/Session Validation Settings ?
– Yiorgos Moschovitis
Oct 24 '17 at 14:02
Here it is: screencast.com/t/GdRnK2ucNM please ignore example.com, I have changed it just for demo
– Shoaib Munir
Oct 25 '17 at 5:23
Use HTTP Only = No is a security risk. I'd reccomend you changed it back on. This is still probably a cookie issue. Have you tried logging in from another browser or computer?
– Yiorgos Moschovitis
Oct 25 '17 at 9:48
|
show 3 more comments
After new magento 1.9 installation when I am login to the admin panel there is a fine flow.
After that if I am opening admin panel on other tab like:
www.example.com/admin
It is showing error on dashboard
Invalid Secret Key. Please refresh the page.
magento-1.9 admin dashboard
asked Oct 24 '17 at 6:58
Shoaib MunirShoaib Munir
1,371524
After new magento 1.9 installation when I am login to the admin panel there is a fine flow.
After that if I am opening admin panel on other tab like:
www.example.com/admin
It is showing error on dashboard
Invalid Secret Key. Please refresh the page.
magento-1.9 admin dashboard
magento-1.9 admin dashboard
asked Oct 24 '17 at 6:58
Shoaib MunirShoaib Munir
1,371524
asked Oct 24 '17 at 6:58
Shoaib MunirShoaib Munir
1,371524
edited 39 secs ago
Shoaib Munir
asked Oct 24 '17 at 6:58
Shoaib MunirShoaib Munir
1,371524
asked Oct 24 '17 at 6:58
Shoaib MunirShoaib Munir
1,371524
asked Oct 24 '17 at 6:58
Shoaib MunirShoaib Munir
1,371524
1,371524
First of all enable formkey validation. Then check web/cookie/cookie_domain and web/cookie/cookie_path to either be correct or empty
– Yiorgos Moschovitis
Oct 24 '17 at 8:03
formkey validation is enabled. web/cookie/cookie_domain set to mydomain.com web/cookie/cookie_path set to / But still facing error
– Shoaib Munir
Oct 24 '17 at 10:11
1
Can you post the settings you have at General/Web/Session Cookie Management and General/Web/Session Validation Settings ?
– Yiorgos Moschovitis
Oct 24 '17 at 14:02
Here it is: screencast.com/t/GdRnK2ucNM please ignore example.com, I have changed it just for demo
– Shoaib Munir
Oct 25 '17 at 5:23
Use HTTP Only = No is a security risk. I'd reccomend you changed it back on. This is still probably a cookie issue. Have you tried logging in from another browser or computer?
– Yiorgos Moschovitis
Oct 25 '17 at 9:48
|
show 3 more comments
First of all enable formkey validation. Then check web/cookie/cookie_domain and web/cookie/cookie_path to either be correct or empty
– Yiorgos Moschovitis
Oct 24 '17 at 8:03
formkey validation is enabled. web/cookie/cookie_domain set to mydomain.com web/cookie/cookie_path set to / But still facing error
– Shoaib Munir
Oct 24 '17 at 10:11
1
Can you post the settings you have at General/Web/Session Cookie Management and General/Web/Session Validation Settings ?
– Yiorgos Moschovitis
Oct 24 '17 at 14:02
Here it is: screencast.com/t/GdRnK2ucNM please ignore example.com, I have changed it just for demo
– Shoaib Munir
Oct 25 '17 at 5:23
Use HTTP Only = No is a security risk. I'd reccomend you changed it back on. This is still probably a cookie issue. Have you tried logging in from another browser or computer?
– Yiorgos Moschovitis
Oct 25 '17 at 9:48
First of all enable formkey validation. Then check web/cookie/cookie_domain and web/cookie/cookie_path to either be correct or empty
– Yiorgos Moschovitis
Oct 24 '17 at 8:03
First of all enable formkey validation. Then check web/cookie/cookie_domain and web/cookie/cookie_path to either be correct or empty
– Yiorgos Moschovitis
Oct 24 '17 at 8:03
formkey validation is enabled. web/cookie/cookie_domain set to mydomain.com web/cookie/cookie_path set to / But still facing error
– Shoaib Munir
Oct 24 '17 at 10:11
formkey validation is enabled. web/cookie/cookie_domain set to mydomain.com web/cookie/cookie_path set to / But still facing error
– Shoaib Munir
Oct 24 '17 at 10:11
1
1
Can you post the settings you have at General/Web/Session Cookie Management and General/Web/Session Validation Settings ?
– Yiorgos Moschovitis
Oct 24 '17 at 14:02
Can you post the settings you have at General/Web/Session Cookie Management and General/Web/Session Validation Settings ?
– Yiorgos Moschovitis
Oct 24 '17 at 14:02
Here it is: screencast.com/t/GdRnK2ucNM please ignore example.com, I have changed it just for demo
– Shoaib Munir
Oct 25 '17 at 5:23
Here it is: screencast.com/t/GdRnK2ucNM please ignore example.com, I have changed it just for demo
– Shoaib Munir
Oct 25 '17 at 5:23
Use HTTP Only = No is a security risk. I'd reccomend you changed it back on. This is still probably a cookie issue. Have you tried logging in from another browser or computer?
– Yiorgos Moschovitis
Oct 25 '17 at 9:48
Use HTTP Only = No is a security risk. I'd reccomend you changed it back on. This is still probably a cookie issue. Have you tried logging in from another browser or computer?
– Yiorgos Moschovitis
Oct 25 '17 at 9:48
|
show 3 more comments
1 Answer
1
active
oldest
votes
I had this issue on EE 1.14, and was provided SUPEE-10358 to fix (which it did!).
The patch updates one line in app/code/core/Mage/Adminhtml/Controller/Action.php
In the preDispatch() method, replace
if ($_keyErrorMsg != ''){
with
if (!$_isValidFormKey) { (around line 189).
I haven't tried it yet in CE, but Action.php is the same in CE 1.9, so I'm hoping this same patch will do the trick.
answered Nov 16 '17 at 16:58
kmdsaxkmdsax
40838
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "479"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fmagento.stackexchange.com%2fquestions%2f198323%2fmagento-1-9-invalid-secret-key-please-refresh-the-page%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
I had this issue on EE 1.14, and was provided SUPEE-10358 to fix (which it did!).
The patch updates one line in app/code/core/Mage/Adminhtml/Controller/Action.php
In the preDispatch() method, replace
if ($_keyErrorMsg != ''){
with
if (!$_isValidFormKey) { (around line 189).
I haven't tried it yet in CE, but Action.php is the same in CE 1.9, so I'm hoping this same patch will do the trick.
answered Nov 16 '17 at 16:58
kmdsaxkmdsax
40838
add a comment |
I had this issue on EE 1.14, and was provided SUPEE-10358 to fix (which it did!).
The patch updates one line in app/code/core/Mage/Adminhtml/Controller/Action.php
In the preDispatch() method, replace
if ($_keyErrorMsg != ''){
with
if (!$_isValidFormKey) { (around line 189).
I haven't tried it yet in CE, but Action.php is the same in CE 1.9, so I'm hoping this same patch will do the trick.
answered Nov 16 '17 at 16:58
kmdsaxkmdsax
40838
add a comment |
I had this issue on EE 1.14, and was provided SUPEE-10358 to fix (which it did!).
The patch updates one line in app/code/core/Mage/Adminhtml/Controller/Action.php
In the preDispatch() method, replace
if ($_keyErrorMsg != ''){
with
if (!$_isValidFormKey) { (around line 189).
I haven't tried it yet in CE, but Action.php is the same in CE 1.9, so I'm hoping this same patch will do the trick.
answered Nov 16 '17 at 16:58
kmdsaxkmdsax
40838
I had this issue on EE 1.14, and was provided SUPEE-10358 to fix (which it did!).
The patch updates one line in app/code/core/Mage/Adminhtml/Controller/Action.php
In the preDispatch() method, replace
if ($_keyErrorMsg != ''){
with
if (!$_isValidFormKey) { (around line 189).
I haven't tried it yet in CE, but Action.php is the same in CE 1.9, so I'm hoping this same patch will do the trick.
answered Nov 16 '17 at 16:58
kmdsaxkmdsax
40838
answered Nov 16 '17 at 16:58
kmdsaxkmdsax
40838
answered Nov 16 '17 at 16:58
kmdsaxkmdsax
40838
answered Nov 16 '17 at 16:58
kmdsaxkmdsax
40838
40838
add a comment |
add a comment |
Thanks for contributing an answer to Magento Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fmagento.stackexchange.com%2fquestions%2f198323%2fmagento-1-9-invalid-secret-key-please-refresh-the-page%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
First of all enable formkey validation. Then check web/cookie/cookie_domain and web/cookie/cookie_path to either be correct or empty
– Yiorgos Moschovitis
Oct 24 '17 at 8:03
formkey validation is enabled. web/cookie/cookie_domain set to mydomain.com web/cookie/cookie_path set to / But still facing error
– Shoaib Munir
Oct 24 '17 at 10:11
1
Can you post the settings you have at General/Web/Session Cookie Management and General/Web/Session Validation Settings ?
– Yiorgos Moschovitis
Oct 24 '17 at 14:02
Here it is: screencast.com/t/GdRnK2ucNM please ignore example.com, I have changed it just for demo
– Shoaib Munir
Oct 25 '17 at 5:23
Use HTTP Only = No is a security risk. I'd reccomend you changed it back on. This is still probably a cookie issue. Have you tried logging in from another browser or computer?
– Yiorgos Moschovitis
Oct 25 '17 at 9:48