CSRF problem about starter-public-edition-4

[ivantcholakov]

http://www.codeigniter.com/userguide3/libraries/security.html?highlight=csrf#cross-site-request-forgery-csrf

$config['csrf_regeneration'] - Could you check this setting?

[ivantcholakov]

$config['csrf_regenerate'] = FALSE;
This is my setting and it is not in the same as it is in CodeIgniter. I prefer it this way. If I have a form that makes some POST AJAX requests (for example it may contain cascaded select boxes), then I afraid that the form would be set with an expired/old token and the form posting would fail. This is why CSRF token regeneration is off by default in this platform.

If there is no chance your forms to be affected by AJAX requests then you may set
$config['csrf_regenerate'] = TRUE;

[Exelord]

yep... it was that.
I dont use POST Ajax so far for sending forms so I rather turn on regenerate.
Thanks for good explanation and sorry for fake issue :( I'm trying help how i can.

[ivantcholakov]

No problem at all.