Poll Voting causes Invalid Token

This forum is for reporting bugs in Joomla!. Please don't report problems with extensions in here.
Locked
User avatar
cacimar
Joomla! Intern
Joomla! Intern
Posts: 82
Joined: Sun Aug 28, 2005 10:29 pm
Location: Austin, TX
Contact:

Poll Voting causes Invalid Token

Post by cacimar » Tue Aug 05, 2008 3:54 pm

Bug 12097 seemed like it was quickly closed, so I answered the question asked of me here
http://joomlacode.org/gf/project/joomla ... m_id=12097
I'm not sure if it will be re-opened, so I'm posting here.
related to thread:
http://forum.joomla.org/viewtopic.php?f=428&t=267521

The following code is added to :
templates/beez/html/section/blog.php

<?php //this is what I add
$myblurb_modules = &JModuleHelper::getModules('promopoll');
foreach ($myblurb_modules as $myblurb) {
$_options = array( 'style' => 'xhtml' );
echo JModuleHelper::renderModule( $myblurb, $_options );
}
?>


This loads my poll in the section blog area.

=====
Joomla 1.5.4
Apache 2
Mysql 5

Problem:
When submitting a second vote for a poll, the error Invalid Token shows.

To Duplicate:
Create a poll.
Publish a poll module for that poll.
Load that module position into an override Section Blog template
Vote once
Open up a second browser and vote a second time in that browser (or have
someone else in the room vote in the poll)

On the second vote, you should get "Invalid Token"

The problem goes away if:
* If I move the the poll to a position on the navigation bar (see
http://www.impactnews.com)
* or, If I load the position inside of an article
* or, If I disable caching on the site (others have been able to disable
caching on just the module, but that doesn't work for me)


or, of course, if I comment out:
components/com_poll/controller.php
line 50: JRequest::checkToken() or jexit( 'Invalid Token' );
--
Rich Vázquez, CISA, CISSP
ImpactNews.com

User avatar
jak9391
Joomla! Apprentice
Joomla! Apprentice
Posts: 13
Joined: Sat Aug 30, 2008 3:16 pm

Re: Poll Voting causes Invalid Token

Post by jak9391 » Fri Sep 12, 2008 1:15 pm

what did you suggest to do with line 50?

User avatar
cacimar
Joomla! Intern
Joomla! Intern
Posts: 82
Joined: Sun Aug 28, 2005 10:29 pm
Location: Austin, TX
Contact:

Re: Poll Voting causes Invalid Token

Post by cacimar » Fri Sep 12, 2008 1:28 pm

Removing it opens your polls up to vulnerability unfortunately. The error does go away, but someone might target your users.

I don't know what to do for an actual solution since it seems to be more internal to the token process.
--
Rich Vázquez, CISA, CISSP
ImpactNews.com

User avatar
beanonymous
Joomla! Apprentice
Joomla! Apprentice
Posts: 43
Joined: Mon Jan 01, 2007 3:59 am
Location: Australia
Contact:

Re: Poll Voting causes Invalid Token

Post by beanonymous » Mon Feb 23, 2009 2:49 am

I think I may have an actual solution... just turn off caching and clear both expired and current poll cache and that should solve it... no need to create a security issue… :D

tappy52dog
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 115
Joined: Sat Dec 17, 2011 7:45 pm

Re: Poll Voting causes Invalid Token

Post by tappy52dog » Thu Feb 16, 2012 11:14 pm

What was your solution for this? Seems like Joomla's System cache is sitll very buggy. Perhaps Jotcache or some other third party extension may help?

User avatar
beanonymous
Joomla! Apprentice
Joomla! Apprentice
Posts: 43
Joined: Mon Jan 01, 2007 3:59 am
Location: Australia
Contact:

Re: Poll Voting causes Invalid Token

Post by beanonymous » Wed Feb 22, 2012 3:00 pm

THis topic was for joomla 1.0 and is long gone since then. As a result any solution provided back then is far out of date.


Locked

Return to “Joomla! 1.5 Bug Reporting”