The security token did not match. The request was aborted to

Discussion regarding Joomla! 3.x security issues.

Moderators: Bernard T, mandville, fcoulter, PhilD, General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Post Reply
aafie
Joomla! Fledgling
Joomla! Fledgling
Posts: 4
Joined: Sun Jun 23, 2019 12:14 am

The security token did not match. The request was aborted to

Post by aafie » Wed Jul 17, 2019 5:28 am

Users login from the front page and receive the following message:

Warning
The security token did not match. The request was aborted to prevent any security breach. Please try again.

The warning message was generated whenever I used the system default login, or used a login from creating a menu item that has "Users" as menu item type and "Login Form" selected in the "Users".

However, if I create a login module by going to Module manager, and choose "login" as the module type, place the module in a location, and then I use that to login, it works without the warning message.
Last edited by imanickam on Wed Jul 17, 2019 6:24 am, edited 1 time in total.
Reason: Your other post https://forum.joomla.org/viewtopic.php?f=710&t=973142&p=3574611#p3574611 on the same subject has been deleted. Please do not cross post as it is against the forum rules.

User avatar
Per Yngve Berg
Joomla! Master
Joomla! Master
Posts: 25871
Joined: Mon Oct 27, 2008 9:27 pm
Location: Akershus, Norway

Re: The security token did not match. The request was aborted to

Post by Per Yngve Berg » Wed Jul 17, 2019 6:35 am

Can be an issue with a override in your template. Try with Protostar.

aafie
Joomla! Fledgling
Joomla! Fledgling
Posts: 4
Joined: Sun Jun 23, 2019 12:14 am

Re: The security token did not match. The request was aborted to

Post by aafie » Wed Jul 17, 2019 7:58 am

Thank you for your reply! The website is using Protostar. Some coworkers created some overrides (com_users/registration and com_users/login) but did not use them. How can I remove the overrides there?

User avatar
paulala
Joomla! Explorer
Joomla! Explorer
Posts: 301
Joined: Sat Oct 30, 2010 12:32 pm
Location: Scotland
Contact:

Re: The security token did not match. The request was aborted to

Post by paulala » Wed Jul 17, 2019 8:22 am

aafie wrote:
Wed Jul 17, 2019 7:58 am
Thank you for your reply! The website is using Protostar. Some coworkers created some overrides (com_users/registration and com_users/login) but did not use them. How can I remove the overrides there?
Just delete them or perhaps move/rename them in the first instance in case you want to reinstate them in the future.
Warm Regards,
Paula Livingstone, Skydiving Instructor and Network Security Consultant
https://paulalivingstone.com
http://rustyice.co.uk

aafie
Joomla! Fledgling
Joomla! Fledgling
Posts: 4
Joined: Sun Jun 23, 2019 12:14 am

Re: The security token did not match. The request was aborted to

Post by aafie » Wed Jul 17, 2019 7:04 pm

Per Yngve Berg wrote:
Wed Jul 17, 2019 6:35 am
Can be an issue with a override in your template. Try with Protostar.
The overrides have been removed, but the problem remains. Any advice is appreciated!

User avatar
sozzled
Joomla! Champion
Joomla! Champion
Posts: 7499
Joined: Sun Jul 05, 2009 3:30 am
Location: Canberra, Australia
Contact:

Re: The security token did not match. The request was aborted to

Post by sozzled » Wed Jul 17, 2019 7:15 pm

Just to be sure, see https://www.joomlashack.com/blog/joomla/overrides/ for information about how to remove overrides.

If this does not resolve the matter, please use the Forum Post Assistant, post the report here, and we may be able to give you some better ideas to address your "security token" problem/questions.
https://www.kuneze.com/blog
Former member of Kunena project team
If you think I’m wrong then say “I think you're wrong.” If you say “You’re wrong!”, how do you know?

aafie
Joomla! Fledgling
Joomla! Fledgling
Posts: 4
Joined: Sun Jun 23, 2019 12:14 am

Re: The security token did not match. The request was aborted to

Post by aafie » Thu Jul 18, 2019 10:17 pm

The problem is still there www.aafie.com even we have removed all overrides. Now we have to use a workaround: to avoid creating menu items with Joomla's login, or using Joomla default login. For example, after users registered, we redirect users to a page, instead of going to the default login by Joomla.


Post Reply

Return to “Security in Joomla! 3.x”