Think I have solved my problem with this error.
Here is a list of things to check/try.
Check tmp directory has 755 permissions – was 705 – some improvement but still there
o System Cache plugin – turned off use browser caching – immediate testing suggests this might be the fix
o Global Config – Session Handler to None – already in place
o Deleting and recreating login modules
o Resolving mixed URLs with
¿ setting Live Site to www. and reversing Server alias on Control Panel, and then going via phpMyAdmin to jos_menu table to correct old links, or
¿ Add to htaccess
AuthName MYSITE.com
RewriteCond %{HTTP_HOST} ^MYSITE.com$ [OR]
RewriteCond %{HTTP_HOST} ^www.MYSITE.com$
RewriteRule ^/?$
http://www.MYSITE.com [R=301,L]
o Ensure that global and component configs have identical site URLs (ie with or without www.)
However, this hack seems to have fixed the issue for me. It removes the invalid token check;
open: components/com_user/controller.php
look for:
Code:
function login()
{
// Check for request forgeries
JRequest::checkToken() or jexit( 'Invalid Token' );
replace with
Code:
function login()
{
// Check for request forgeries
JRequest::checkToken() or header('Location: http://www.yourdomainname.com/');
This was copied from another post. I have logged in, pressed back, logged out - (after enabling Cache settings in global config - which is what caused my Invalid Token issues), logged in multiple times and not got the error.
Hope this helps.
