部分网站火车头发布报错CSRF异常,其他网站可以

迅睿框架 更新 2024-05-27 10:13:41 橄榄

部分网站提示报错CSRF验证超时请重试

方案

  • 麦加 #1 · 2024-05-15 12:25:02
    加一个CSRF白名单
  • 橄榄 #2 · 2024-05-15 12:26:25
    麦加 发布失败,错误信息:
    网页源代码:<!DOCTYPE html><html><head><meta charset="utf-8"><title>系统错误</title><style> div.logo { height: 200px; width: 155px; display: inline-block; opacity: 0.08; position: absolute; top: 2rem; left: 50%; margin-left: -73px; } body { height: 100%; background: #fafafa; font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; color: #777; font-weight: 300; } h1 { font-weight: lighter; letter-spacing: 0.8; font-size: 3rem; margin-top: 0; margin-bottom: 0; color: #222; } .wrap { max-width: 1024px; margin: 5rem auto; padding: 2rem; background: #fff; text-align: center; border: 1px solid #efefef; border-radius: 0.5rem; position: relative; } pre { white-space: normal; margin-top: 1.5rem; } code { background: #fafafa; border: 1px solid #efefef; padding: 0.5rem 1rem; border-radius: 5px; display: block; } p { margin-top: 1.5rem; } .footer { margin-top: 2rem; border-top: 1px solid #efefef; padding: 1em 2em 0 2em; font-size: 85%; color: #999; } a:active, a:link, a:visited { color: #dd4814; }</style></head><body><div><p>CSRF验证超时请重试</p><p>、index.php?s=collapi&c=db&m=post&id=1&token=ppolive22</p></div></body></html>返回的Header:HTTP/1.1 200 OKServer:nginxDate:Wed, 15 May 2024 04:13:59 GMTContent-Type:text/html; charset=utf-8Vary:Accept-EncodingStrict-Transport-Security:max-age=31536000Access-Control-Allow-Credentials:trueAccess-Control-Allow-Origin:*Access-Control-Allow-Methods:GET,POST,PUT,DELETE,OPTIONSAccess-Control-Allow-Headers:*Content-Encoding:gzipX-Cache-Lookup:Cache Miss,Cache MissTransfer-Encoding:chunkedX-NWS-LOG-UUID:8209223503918841189Connection:keep-aliveContent-Length:1779
    发布失败,错误信息:发布失败,返回错误信息:标题重复标题重复网页源代码:标题重复返回的Header:HTTP/1.1 200 OKServer:nginxDate:Wed, 15 May 2024 04:13:59 GMTContent-Type:text/html; charset=utf-8Vary:Accept-EncodingStrict-Transport-Security:max-age=31536000Content-Encoding:gzipX-Cache-Lookup:Cache Miss,Cache MissTransfer-Encoding:chunkedX-NWS-LOG-UUID:10311672095002649213Connection:keep-aliveContent-Length:12
  • 橄榄 #3 · 2024-05-15 12:26:51
    麦加 报错如上,如何加呢?主要是有一个网站,没抱错
  • 小黄人 18html #4 · 2024-05-15 12:28:31
    检查了插件,最新版本文件中有对应CSRF白名单,建议先升级到最新版本,再看看是否存在该问题
  • 橄榄 #5 · 2024-05-15 12:28:34
    发布失败,错误信息:
    网页源代码:<!DOCTYPE html><html><head><meta charset="utf-8"><title>系统错误</title><style> div.logo { height: 200px; width: 155px; display: inline-block; opacity: 0.08; position: absolute; top: 2rem; left: 50%; margin-left: -73px; } body { height: 100%; background: #fafafa; font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; color: #777; font-weight: 300; } h1 { font-weight: lighter; letter-spacing: 0.8; font-size: 3rem; margin-top: 0; margin-bottom: 0; color: #222; } .wrap { max-width: 1024px; margin: 5rem auto; padding: 2rem; background: #fff; text-align: center; border: 1px solid #efefef; border-radius: 0.5rem; position: relative; } pre { white-space: normal; margin-top: 1.5rem; } code { background: #fafafa; border: 1px solid #efefef; padding: 0.5rem 1rem; border-radius: 5px; display: block; } p { margin-top: 1.5rem; } .footer { margin-top: 2rem; border-top: 1px solid #efefef; padding: 1em 2em 0 2em; font-size: 85%; color: #999; } a:active, a:link, a:visited { color: #dd4814; }</style></head><body><div><p>CSRF验证超时请重试</p><p>/index.php?s=collapi&c=db&m=post&id=1&token=ppolive22</p></div></body></html>返回的Header:HTTP/1.1 200 OKServer:nginxDate:Wed, 15 May 2024 04:13:59 GMTContent-Type:text/html; charset=utf-8Vary:Accept-EncodingStrict-Transport-Security:max-age=31536000Access-Control-Allow-Credentials:trueAccess-Control-Allow-Origin:*Access-Control-Allow-Methods:GET,POST,PUT,DELETE,OPTIONSAccess-Control-Allow-Headers:*Content-Encoding:gzipX-Cache-Lookup:Cache Miss,Cache MissTransfer-Encoding:chunkedX-NWS-LOG-UUID:8209223503918841189Connection:keep-aliveContent-Length:1779
    发布失败,错误信息:发布失败,返回错误信息:标题重复标题重复网页源代码:标题重复返回的Header:HTTP/1.1 200 OKServer:nginxDate:Wed, 15 May 2024 04:13:59 GMTContent-Type:text/html; charset=utf-8Vary:Accept-EncodingStrict-Transport-Security:max-age=31536000Content-Encoding:gzipX-Cache-Lookup:Cache Miss,Cache MissTransfer-Encoding:chunkedX-NWS-LOG-UUID:10311672095002649213Connection:keep-aliveContent-Length:12
  • 橄榄 #6 · 2024-05-15 12:30:35
    小黄人 18html 好像都是有的,检查了几个网站,都有这个文件
    image
  • 小黄人 18html #7 · 2024-05-27 10:13:41
    白名单文件不是一成不变的,插件出现异常,首先升级插件 / CMS内核到最新版本!

迅睿系统漏洞

站群分站系统
站群分站系统(2026-10-15)
子站域名新增llms.txt访问
GEO系统
GEO系统(2026-10-14)
修复下载zip空白地址问题 修复流量复刻和任务队列错误
GeoSeo收录宝
GeoSeo收录宝(2026-10-14)
新增 站长工具箱 前端首页自动调用meta 数据
滑块验证码 Gocaptcha
滑块验证码 Gocaptcha(2026-10-13)
基于开源项目 go-captcha 的行为验证码插件,滑动拼图、区域...
GeoSeo工具箱
GeoSeo工具箱(2026-10-13)
优化巡检任务
GeoSeo排名助手
GeoSeo排名助手(2026-10-11)
加入大模型自定义
SEO聚合关键字
SEO聚合关键字(2026-10-11)
优化关键字列表页最多支持1万篇文章,过多会导致服务器扛不住;
CMS内容同步复制
CMS内容同步复制(2026-10-10)
增加时间是否更新的开关