CSRF attack suspected (Error message when exporting survey results to excel)

More
5 years 4 months ago #72917 by klauri
klauri created the topic: CSRF attack suspected (Error message when exporting survey results to excel)
I am having problems with exporting four of my 25 questionnaires into Excel. When I attempt to dump the data from LS into Excel I get this error message:

Access denied! Security alert: Someone may be trying to use your LimeSurvey session (CSRF attack suspected). If you just clicked on a malicious link, please report this to your system administrator. Also this problem can occur when you are working/editing in LimeSurvey in several browser windows/tabs at the same time.

I have been using these questionnaires for over 8 months (deploying them once a month)and I have never had this problem. We just un-installed the Shushin package, as we thought it was creating new problems that did not exist before. I cleared my internet cache after it was uninstalled. However, I am still getting this error message when I try to export.

I do not believe that I am using mulptiple browser windows or tabs either.

Any assistance with this issue would be greatly appreciated. This is a grant funded project that we do program evaluation for a Cancer Partnership.
Thanks

Please Log in to join the conversation.

More
5 years 4 months ago #73008 by Mazi
Mazi replied the topic: CSRF attack suspected (Error message when exporting survey results to excel)
1. Which Limesurvey version do you use?

2. How big are the exported files/are there lots of answers?

3. Please check the servers error log. Are there any errors reporting when trying to export results?

4. Please switch on debug mode by adding the following line to your config.php file:
$debug = '1';

Are there any additional errors reported on top of the page?

5. Does exporting to MS Word or other formats work fine?

6. What happens if you export only some very few of the data sets?


Best regards/Beste Grüße,
Dr. Marcel Minke
(Limesurvey Head of Support)
Need Help? We offer professional Limesurvey support
Contact: marcel.minke(at)survey-consulting.com'"

Please Log in to join the conversation.

More
4 years 11 months ago #82024 by baz123
baz123 replied the topic: CSRF attack suspected (Error message when exporting survey results to excel)
I have a new install of 1.92+ build 120530 and I am getting this error. Only one survey in the system - 2 responses (I'm testing it). I can get an export to Excel but not view stats in either HTML or PDF. IE7 - and no I cannot use another version for now - corporate policy and I only have one browser open and LimeSurvey in a single tab. I do not have Admin rights to the server but will need to provide some compelling explanation of what is wrong and what needs to be fixed.

Please Log in to join the conversation.

More
4 years 11 months ago #82026 by baz123
baz123 replied the topic: CSRF attack suspected (Error message when exporting survey results to excel)
Had a thought; Logged out and closed the browser. On restart and logging in to LimeSurvey, I was able to view the statistics. It seems it may not just be caused when having more than one window open so the advice should be extended to logging out of LimeSurvey and restarting all browsers.

I had previously copied a survey and made that copy active (within the same session) and then submitted 2 responses myself. All that may be contributing factors.

Please Log in to join the conversation.

More
4 years 11 months ago #82028 by Ben_V
Ben_V replied the topic: CSRF attack suspected (Error message when exporting survey results to excel)
../
6. How stable/fast is your internet connexion?

=>I've already seen this message (backoffice working) but each time using a pretty slow adsl 3G modem...

Benoît

EM Variables => bit.ly/1TKQyNu | EM Roadmap => bit.ly/1UTrOB4
Last Releases => 2.6x.x goo.gl/ztWfIV | 2.06/2.6.x => bit.ly/1Qv44A1
Demo Surveys => goo.gl/HuR6Xe (already included in /docs/demosurveys)

Please Log in to join the conversation.

More
4 years 11 months ago #82031 by baz123
baz123 replied the topic: CSRF attack suspected (Error message when exporting survey results to excel)
Internet connection is reasonable (Corporate LAN through a gateway).

Please Log in to join the conversation.

More
4 years 11 months ago #82075 by Mazi
Mazi replied the topic: CSRF attack suspected (Error message when exporting survey results to excel)

baz123 wrote: Had a thought; Logged out and closed the browser. On restart and logging in to LimeSurvey, I was able to view the statistics. It seems it may not just be caused when having more than one window open so the advice should be extended to logging out of LimeSurvey and restarting all browsers.

I had previously copied a survey and made that copy active (within the same session) and then submitted 2 responses myself. All that may be contributing factors.

Good catch, that probably caused the problem. Please update any forum/manual entry related to this and add additional information.

Thanks!


Best regards/Beste Grüße,
Dr. Marcel Minke
(Limesurvey Head of Support)
Need Help? We offer professional Limesurvey support
Contact: marcel.minke(at)survey-consulting.com'"

Please Log in to join the conversation.

Start now!

Just create your account and start using Limesurvey today.

Register now