Hi,

When I want to change or create a TinyD content page on my home computer I don't experience any problems. When I do the same thing on my friends computer and try to save the content I get an
"Invalid session" error.

Do you have any ideas?

Fred

Perhaps, your friends installed Norton internet security.
Turn refere On, please.

Hello,

I also get the "invalid session" every 2 of 3 tries with SPAW. Turning referer on is done how and does it cause other problems?

Thanks.

PS. Anyone have the Koivi Editor configured with TinyD2.17a? I'd love to get it. Thanks again.

Quote:hmmm...
It is a difficult problem because I've never experienced.

Anyway I have to modify it.
(I've heard the same problems from two or tree the other users.)

Quote:At least, I'll never implement it, sorry.

When I checked the codes of Koivi in XOOPS 2.2 core, I was surprised that the codes are full of security holes (XSS, DirectoryTraversal etc.)

My first priority is "SECURITY".

I was actually wondering if the problem not occur because of too much security.

I use 2 different computers, one of them being a laptop that I use from work and home.

Can the SPAW "invalid Session" problem be caused by changing connection and computer, while it checks with a cache previous session?? Just throwing a strange question, I'm sure.

Peace

Invalid session means you are trapped with "the mechanism of anti-CSRF".

I know it is necessary to implement some mechanism of "redo POST".

This mechanism is safe from CSRF (forced POST by someone) and useful for valid POST (posted with an intension of user self).

Same problem over here.

While trying to edit TinyD (2.18) Content as Non-Admin/Webmaster User using the SPAW-Editor and try to Save i get an constant "Invalid Session" returned.

Editing the content with the integrated Editor works like a charm. As Admin/Webmaster i can use SPAW without any problems. If i try to make a new user and give him Admin/Webmaster Privileges the Error returns... quite strange.

Im using Xoops 2.0.13 with latest TinyD 2.18. I also used a complete fresh install without any other modules beside TinyD2 and the Spaw Editor.

Hope you find a solution to this.

Edited: The mentioned problems only occurs on a different computer, everything works fine on the computer where i usually work on and registered my account.

Works fine with an older version of spaw. Was trying out various combinations of TinyD-versions today and stumbled over version 2.06. Using the Spaw inside that package, sloves the "Invalid Session" problem on my side. While it still persists using the Spaw editors which came with TinyD2 2.14 - 2.18.

So im currently using Xoops 2.0.13 with TinyD 2.18 and an older Spaw version.

The problems are partially sloved over here.

First off all we added:

&usespaw=1

to all SPAW-related links inside index.php.

That sloved the "invalid session" for many users over here. There were still some users getting that error.

Somehow it was related with the MS IE (6.0.2800 & 6.0.3790) security settings. Changing the internet security settings to "low" removed the error. More strange was after returning the settings back to "medium" the error never showed up again.

Guess ill start to believe in miracles.

There are now only some users left which arent able to save/change TinyD content. Those users have only one thing in common and thats an Squid HTTP Proxy.

Hope it helps.

Please help, where do I find SPAW 2.06?