starred/nsedit

Fork 0

mirror of https://github.com/tuxis-ie/nsedit.git synced 2026-04-27 00:25:50 +03:00

[GH-ISSUE #134] "An error occured while communicating to the server." (again) #82

New issue

Closed

opened 2026-02-28 01:20:54 +03:00 by kerem · 5 comments

kerem commented

2026-02-28 01:20:54 +03:00

Owner

Originally created by @hoalex on GitHub (Nov 9, 2016).
Original GitHub issue: https://github.com/tuxis-ie/nsedit/issues/134

When trying to login, I immediately get "An error occured while communicating to the server.". I know that there were already similar issues, but after reading them I'm still not sure what causes the error.

This happens for me on a fresh install (pulled today from git-master). My system:

Debian Jessie 8.6
PHP 5.6.27-0+deb8u1
php5-sqlite 5.6.27+dfsg-0+deb8u1
php5-curl 5.6.27+dfsg-0+deb8u1
nginx 1.6.2

When loggin in with admin/admin, the site loads and immediately shows the following error message:

Looking at the Firefox debug console, I can see that there are two HTTP POST requests to zones.php which fail:

I am not sure whether the error message is specifically caused by the 403, just a wild guess. PHP-FPM and nginx logs show no errors.

Regards
Alex

Originally created by @hoalex on GitHub (Nov 9, 2016). Original GitHub issue: https://github.com/tuxis-ie/nsedit/issues/134 When trying to login, I immediately get "An error occured while communicating to the server.". I know that there were already similar issues, but after reading them I'm still not sure what causes the error. This happens for me on a fresh install (pulled today from git-master). My system: - Debian Jessie 8.6 - PHP 5.6.27-0+deb8u1 - php5-sqlite 5.6.27+dfsg-0+deb8u1 - php5-curl 5.6.27+dfsg-0+deb8u1 - nginx 1.6.2 When loggin in with admin/admin, the site loads and immediately shows the following error message: ![Screenshot](https://i.imgur.com/ijd5eTi.png) Looking at the Firefox debug console, I can see that there are two HTTP POST requests to ``zones.php`` which fail: ![Screenshot 2](https://i.imgur.com/2XXLvFa.png) I am not sure whether the error message is specifically caused by the 403, just a wild guess. PHP-FPM and nginx logs show no errors. Regards Alex

kerem closed this issue

2026-02-28 01:20:54 +03:00

kerem commented

2026-02-28 01:20:55 +03:00

Author

Owner

@tuxis-ie commented on GitHub (Nov 9, 2016):

This is almost definite a php issue. What do you mean with "again"?

@tuxis-ie commented on GitHub (Nov 9, 2016): This is almost definite a php issue. What do you mean with "again"?

kerem commented

2026-02-28 01:20:55 +03:00

Author

Owner

@hoalex commented on GitHub (Nov 9, 2016):

"Again" because of the previous issues here on Github that had the same error ;-)

Any advice on how I can begin troubleshooting the issue? If I disable the CSRF check in lines 9-13 in zones.php, the site loads just fine. I guess somehow the CSRF token is not correctly interpreted (note that the Firefox console shows that a "X-CSRF-Token" is transmitted during the POST request).

@hoalex commented on GitHub (Nov 9, 2016): "Again" because of the previous issues here on Github that had the same error ;-) Any advice on how I can begin troubleshooting the issue? If I disable the CSRF check in lines 9-13 in `zones.php`, the site loads just fine. I guess somehow the CSRF token is not correctly interpreted (note that the Firefox console shows that a "X-CSRF-Token" is transmitted during the POST request).

kerem commented

2026-02-28 01:20:55 +03:00

Author

Owner

@tuxis-ie commented on GitHub (Nov 9, 2016):

Probably has something to do with the function on line 377 of misc.php?

@tuxis-ie commented on GitHub (Nov 9, 2016): Probably has something to do with the function on line 377 of misc.php?

kerem commented

2026-02-28 01:20:55 +03:00

Author

Owner

@hoalex commented on GitHub (Nov 9, 2016):

I created a new file and ensured that the hash_pbkdf2() function works (it does). I also tried commenting out the function you mentioned, but the error still persists. :-(

Looking deeper, I found out that $found_token is always null in the _check_csrf_token() function (found in includes/session.inc.php). $csrf_token has the correct value, i.e. the one also sent by the browser...

@hoalex commented on GitHub (Nov 9, 2016): I created a new file and ensured that the hash_pbkdf2() function works (it does). I also tried commenting out the function you mentioned, but the error still persists. :-( Looking deeper, I found out that `$found_token` is always null in the `_check_csrf_token()` function (found in `includes/session.inc.php`). `$csrf_token` has the correct value, i.e. the one also sent by the browser...

kerem commented

2026-02-28 01:20:55 +03:00

Author

Owner

@tuxis-ie commented on GitHub (Nov 10, 2016):

Then it's probably an issue with php-fpm and Nginx where you are loosing $_SERVER[] stuff..

@tuxis-ie commented on GitHub (Nov 10, 2016): Then it's probably an issue with php-fpm and Nginx where you are loosing $_SERVER[] stuff..

kerem referenced this issue

2026-02-28 01:21:16 +03:00

[PR #82] [MERGED] Allow a user to change his own password. Closes #62 #163