[Vtigercrm-developers] Important Bug Workflows and emails

Manu urs manu.k at vtiger.com
Mon Aug 31 05:10:18 GMT 2015


Hi

Please add the below patch of code in the config.php  file  to solve the
issue.

/**
>  * Vtiger specific custom config startup for CSRF
>  */
> function csrf_startup(){
>     //Override the default expire time of token
>     $GLOBALS['csrf']['expires'] = 259200;
>
>     /**if an ajax request initiated, then if php serves content with <html> tags
>      * as a response, then unnecessarily we are injecting csrf magic javascipt
>      * in the response html at <head> and <body> using csrf_ob_handler().
>      * So, to overwride above rewriting we need following config.
>      */
>     if(isAjax()) {
>         $GLOBALS['csrf']['frame-breaker'] = false;
>         $GLOBALS['csrf']['rewrite-js'] = null;
>     }
> }
>
> function isAjax() {
>     if (!empty($_SERVER['HTTP_X_PJAX']) && $_SERVER['HTTP_X_PJAX'] == true) {
>         return true;
>     } elseif (!empty($_SERVER['HTTP_X_REQUESTED_WITH'])) {
>         return true;
>     }
>     return false;
> }
>
>
Regards,
Manu Urs

On Sun, Aug 30, 2015 at 11:42 AM, Stacey Johnson <
stacey.johnson110 at gmail.com> wrote:

> What about below reported bug?
> What time frame "soon" should normally cover?
>
> On Sat, May 9, 2015 at 12:46 AM, Uma S <uma.s at vtiger.com> wrote:
>
>> Hi,
>>
>> We are in between different project development work, will get back soon.
>>
>> On Fri, May 8, 2015 at 9:33 PM, Alan Lord <alanslists at gmail.com> wrote:
>>
>>> On 08/05/15 16:39, Manuel Fernando wrote:
>>>
>>>> Uma S,
>>>>
>>>> I know you could reproduce this error. Great, but any fix soon or plans
>>>> to update us?
>>>>
>>>
>>> +1
>>>
>>>
>>> _______________________________________________
>>> http://www.vtiger.com/
>>>
>>
>>
>>
>> --
>> With
>> Best Regards
>> Uma.S
>> Vtiger Team
>>
>> _______________________________________________
>> http://www.vtiger.com/
>>
>
>
> _______________________________________________
> http://www.vtiger.com/
>



-- 
Regards,
Manu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.vtigercrm.com/pipermail/vtigercrm-developers/attachments/20150831/de4230c8/attachment.html>


More information about the vtigercrm-developers mailing list