Getting "Expired token" errors ? Here is a solution to avoid invalid CSRF on POST or ajax requests, or user identity changes.
Yii Framework Wiki
Wiki articles in category How-tos tagged with "session"
Showing 1-5 of 5 items.
Show captcha after <N> unsuccessfull attempts
In this mini howto I would like to show how to add a required captcha field in the login form, after a defined number of unsuccessfull attempts. To do this, I will use the blog demo that you have in default Yii download package (path/to/yii/demos/blog).
Using loginRequiredAjaxResponse to solve ajax session timeout
This solution requires Yii 1.1.9 or above
How to validate CSRF token with session
First of all, You must change component config to enable the default Yii CSRF validation.
Single sign on across multiple subdomains
This had me stumped for a while so I figured it would be nice to share here to avoid others the grief.