Wiki articles in category How-tos tagged with "session"

Getting "Expired token" errors ? Here is a solution to avoid invalid CSRF on POST or ajax requests, or user identity changes.

In this mini howto I would like to show how to add a required captcha field in the login form, after a defined number of unsuccessfull attempts. To do this, I will use the blog demo that you have in default Yii download package (path/to/yii/demos/blog).

This solution requires Yii 1.1.9 or above

First of all, You must change component config to enable the default Yii CSRF validation.

This had me stumped for a while so I figured it would be nice to share here to avoid others the grief.