<p>After I input my credentials, it just stayed on the login page, and did not go to the dashboard. The password is good, we didn't get invalid username and password error.</p>

<p>I opened the trace mode and found this error in the craft.log:</p>

<blockquote>
  <p>Unable to determine if PATH_INFO is enabled on the server: [curl] 60:
  Could it cause the error? </p>
  
  <p>The CSRF token could not be verified</p>
</blockquote>

<pre><code>2016/12/20 12:52:41 [error] [exception.Craft\HttpException.400] exception 'Craft\HttpException' with message 'The CSRF token could not be verified.' in /var/www/vhosts/xxx.com/master/craft/app/services/HttpRequestService.php:1314 Stack trace:
    #0 /var/www/vhosts/xxx.com/master/craft/app/framework/base/CComponent.php(561): Craft\HttpRequestService-&gt;validateCsrfToken(Object(CEvent))
    #1 /var/www/vhosts/xxx.com/master/craft/app/framework/base/CApplication.php(212): CComponent-&gt;raiseEvent('onBeginRequest', Object(CEvent))
    #2 /var/www/vhosts/xxx.com/master/craft/app/framework/base/CApplication.php(183): CApplication-&gt;onBeginRequest(Object(CEvent))
    #3 /var/www/vhosts/xxx.com/master/craft/app/index.php(62): CApplication-&gt;run()
    #4 /var/www/vhosts/xxx.com/master/public/index.php(20): require_once('/var/www/vhosts...')
    #5 {main} REQUEST_URI=/wtuygyq/upuj/duhuhog
</code></pre>

CC BY-SA 3.0
2016-12-20T15:26:59.603Z
Did this happen just once or do you have this problem often. With which browser did this happen and did you try other browsers?
carlcs
CC BY-SA 3.0
2016-12-20T15:31:20.707Z
It has been 2 days from IE and chrome. I cleared runtime, restart httpd. Doesn't help.
xyray
CC BY-SA 3.0
2016-12-20T17:29:06.590Z
`#5 {main} REQUEST_URI=/wtuygyq/upuj/duhuhog` - is that request uri real, or did you obfuscate it?
Brad Bell
CC BY-SA 3.0
2016-12-20T19:39:22.090Z
I did't change REQUEST_URI , I am also wondering what it is? Some decryption issue?
xyray
CC BY-SA 3.0
2016-12-21T22:07:40.253Z
I think it's a bot making random posts your site and the real reason you can't log in is somewhere else in your logs.  I'd nuke the log files and try to load in again to get rid of the extra logging noise.
Brad Bell
CC BY-SA 3.0
2017-01-04T22:15:39.160Z
@BradBell  I copied production db and code to dev, everything works properly. what's wrong with my prd environment.
xyray
<admin><csrf><environmentvariables>
Can’t log in to the Craft control panel
# Can’t log in to the Craft control panel

(Asked by: username_0 on 2016-12-20)

After I input my credentials, it just stayed on the login page, and did not go to the dashboard. The password is good, we didn't get invalid username and password error.
I opened the trace mode and found this error in the craft.log:

Unable to determine if PATH_INFO is enabled on the server: [curl] 60:
  Could it cause the error? 
The CSRF token could not be verified

2016/12/20 12:52:41 [error] [exception.Craft\HttpException.400] exception 'Craft\HttpException' with message 'The CSRF token could not be verified.' in /var/www/vhosts/xxx.com/master/craft/app/services/HttpRequestService.php:1314 Stack trace:
    #0 /var/www/vhosts/xxx.com/master/craft/app/framework/base/CComponent.php(561): Craft\HttpRequestService->validateCsrfToken(Object(CEvent))
    #1 /var/www/vhosts/xxx.com/master/craft/app/framework/base/CApplication.php(212): CComponent->raiseEvent('onBeginRequest', Object(CEvent))
    #2 /var/www/vhosts/xxx.com/master/craft/app/framework/base/CApplication.php(183): CApplication->onBeginRequest(Object(CEvent))
    #3 /var/www/vhosts/xxx.com/master/craft/app/index.php(62): CApplication->run()
    #4 /var/www/vhosts/xxx.com/master/public/index.php(20): require_once('/var/www/vhosts...')
    #5 {main} REQUEST_URI=/wtuygyq/upuj/duhuhog

**Tags:** admin, csrf, environmentvariables

> **Comments:**
> **username_1**: Did this happen just once or do you have this problem often. With which browser did this happen and did you try other browsers?  
> **username_0**: It has been 2 days from IE and chrome. I cleared runtime, restart httpd. Doesn't help.  
> **username_2**: `#5 {main} REQUEST_URI=/wtuygyq/upuj/duhuhog` - is that request uri real, or did you obfuscate it?  
> **username_0**: I did't change REQUEST_URI , I am also wondering what it is? Some decryption issue?  
> **username_2**: I think it's a bot making random posts your site and the real reason you can't log in is somewhere else in your logs.  I'd nuke the log files and try to load in again to get rid of the extra logging noise.  
> **username_0**: @BradBell  I copied production db and code to dev, everything works properly. what's wrong with my prd environment.  

---

## 0 answers

