# CSRFTokenValidationException

**URL:** <https://forum.shopware.com/t/csrftokenvalidationexception/43680>\
**Category:** Allgemein\
**Created:** [13. Februar 2017 um 21:20 UTC](https://forum.shopware.com/t/csrftokenvalidationexception/43680 "2017-02-13T21:20:03Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kai23](https://avatars.discourse-cdn.com/v4/letter/k/c89c15/32.png) [@Kai23](https://forum.shopware.com/u/Kai23)\
**Post date:** [13. Februar 2017 um 21:20 UTC](https://forum.shopware.com/t/csrftokenvalidationexception/43680/1 "2017-02-13T21:20:03Z")

</div>

Hallo,

ich bekomme sehr oft diese Fehlermeldungen per Mail.

&nbsp;

The provided X-CSRF-Token for path “/register/ajax\_validate\_email” is invalid.

```
ERROR

Message:  
exception 'Shopware\Components\CSRFTokenValidationException' with message 'The provided X-CSRF-Token for path "/register/ajax_validate_email" is invalid. Please go back, reload the page and try again.' in /var/www/vhosts/shopware/docroot/engine/Shopware/Components/CSRFTokenValidator.php:158
Stack trace:
#0 [internal function]: Shopware\Components\CSRFTokenValidator->checkFrontendTokenValidation(Object(Enlight_Controller_ActionEventArgs))
#1 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Event/Handler/Default.php(91): call_user_func(Array, Object(Enlight_Controller_ActionEventArgs))
#2 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Event/EventManager.php(214): Enlight_Event_Handler_Default->execute(Object(Enlight_Controller_ActionEventArgs))
#3 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Action.php(143): Enlight_Event_EventManager->notify('Enlight_Control...', Object(Enlight_Controller_ActionEventArgs))
#4 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Dispatcher/Default.php(523): Enlight_Controller_Action->dispatch('ajaxValidateEma...')
#5 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Front.php(223): Enlight_Controller_Dispatcher_Default->dispatch(Object(Enlight_Controller_Request_RequestHttp), Object(Enlight_Controller_Response_ResponseHttp))
#6 /var/www/vhosts/shopware/docroot/engine/Shopware/Kernel.php(180): Enlight_Controller_Front->dispatch()
#7 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(487): Shopware\Kernel->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true)
#8 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(255): Symfony\Component\HttpKernel\HttpCache\HttpCache->forward(Object(Symfony\Component\HttpFoundation\Request), true, NULL)
#9 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(258): Shopware\Components\HttpCache\AppCache->forward(Object(Symfony\Component\HttpFoundation\Request), true)
#10 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(275): Symfony\Component\HttpKernel\HttpCache\HttpCache->pass(Object(Symfony\Component\HttpFoundation\Request), true)
#11 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(133): Symfony\Component\HttpKernel\HttpCache\HttpCache->invalidate(Object(Symfony\Component\HttpFoundation\Request), true)
#12 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(206): Shopware\Components\HttpCache\AppCache->invalidate(Object(Symfony\Component\HttpFoundation\Request), true)
#13 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(114): Symfony\Component\HttpKernel\HttpCache\HttpCache->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true)
#14 /var/www/vhosts/shopware/docroot/shopware.php(117): Shopware\Components\HttpCache\AppCache->handle(Object(Symfony\Component\HttpFoundation\Request))
#15 {main}
Time: 
2017-02-13T21:57:35.976615+0100
Channel:  
core
request:  
{
    "uri": "/register/ajax_validate_email",
    "method": "POST",
    "query": {
        "module": "frontend",
        "controller": "register",
        "action": "ajax_validate_email"
    },
    "post": {
        "action": "ajax_validate_email",
        "register": {
            "personal": {
                "customer_type": "private",
                "salutation": "mr",
                "firstname": "M***",
                "lastname": "G***",
                "accountmode": "1",
                "email": "b***@googlemail.com",
                "phone": "",
                "birthday": {
                    "day": "",
                    "month": "",
                    "year": ""
                }
            },
            "billing": {
                "street": "",
                "zipcode": "",
                "city": "",
                "country": "38"
            },
            "shipping": {
                "company": "",
                "department": "",
                "firstname": "",
                "lastname": "",
                "street": "",
                "zipcode": "",
                "city": ""
            }
        },
        "__csrf_token": "RFNqvSCMKYduV81xbhqICBEQSnNwwu"
    }
}
session:  
No session data available
shopId: 
1

```

&nbsp;

&nbsp;

'The provided X-CSRF-Token for path “/register/saveRegister/sTarget/checkout/sTargetAction/shippingPayment” is invalid.

```
ERROR

Message:  
exception 'Shopware\Components\CSRFTokenValidationException' with message 'The provided X-CSRF-Token for path "/register/saveRegister/sTarget/checkout/sTargetAction/shippingPayment" is invalid. Please go back, reload the page and try again.' in /var/www/vhosts/shopware/docroot/engine/Shopware/Components/CSRFTokenValidator.php:158
Stack trace:
#0 [internal function]: Shopware\Components\CSRFTokenValidator->checkFrontendTokenValidation(Object(Enlight_Controller_ActionEventArgs))
#1 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Event/Handler/Default.php(91): call_user_func(Array, Object(Enlight_Controller_ActionEventArgs))
#2 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Event/EventManager.php(214): Enlight_Event_Handler_Default->execute(Object(Enlight_Controller_ActionEventArgs))
#3 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Action.php(143): Enlight_Event_EventManager->notify('Enlight_Control...', Object(Enlight_Controller_ActionEventArgs))
#4 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Dispatcher/Default.php(523): Enlight_Controller_Action->dispatch('saveRegisterAct...')
#5 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Front.php(223): Enlight_Controller_Dispatcher_Default->dispatch(Object(Enlight_Controller_Request_RequestHttp), Object(Enlight_Controller_Response_ResponseHttp))
#6 /var/www/vhosts/shopware/docroot/engine/Shopware/Kernel.php(180): Enlight_Controller_Front->dispatch()
#7 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(487): Shopware\Kernel->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true)
#8 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(255): Symfony\Component\HttpKernel\HttpCache\HttpCache->forward(Object(Symfony\Component\HttpFoundation\Request), true, NULL)
#9 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(258): Shopware\Components\HttpCache\AppCache->forward(Object(Symfony\Component\HttpFoundation\Request), true)
#10 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(275): Symfony\Component\HttpKernel\HttpCache\HttpCache->pass(Object(Symfony\Component\HttpFoundation\Request), true)
#11 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(133): Symfony\Component\HttpKernel\HttpCache\HttpCache->invalidate(Object(Symfony\Component\HttpFoundation\Request), true)
#12 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(206): Shopware\Components\HttpCache\AppCache->invalidate(Object(Symfony\Component\HttpFoundation\Request), true)
#13 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(114): Symfony\Component\HttpKernel\HttpCache\HttpCache->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true)
#14 /var/www/vhosts/shopware/docroot/shopware.php(117): Shopware\Components\HttpCache\AppCache->handle(Object(Symfony\Component\HttpFoundation\Request))
#15 {main}
Time: 
2017-02-13T21:58:50.063145+0100
Channel:  
core
request:  
{
    "uri": "/register/saveRegister/sTarget/checkout/sTargetAction/shippingPayment",
    "method": "POST",
    "query": {
        "module": "frontend",
        "controller": "register",
        "action": "saveRegister",
        "sTarget": "checkout",
        "sTargetAction": "shippingPayment"
    },
    "post": {
        "register": {
            "personal": {
                "customer_type": "private",
                "salutation": "mr",
                "firstname": "M***",
                "lastname": "G***",
                "accountmode": "1",
                "email": "b***@googlemail.com",
                "phone": "",
                "birthday": {
                    "day": "26",
                    "month": "9",
                    "year": "1986"
                }
            },
            "billing": {
                "street": "W***",
                "zipcode": "7***",
                "city": "K***",
                "country": "2"
            },
            "shipping": {
                "company": "",
                "department": "",
                "firstname": "",
                "lastname": "",
                "street": "",
                "zipcode": "",
                "city": ""
            }
        },
        "Submit": "",
        "__csrf_token": "RFNqvSCMKYduV81xbhqICBEQSnNwwu"
    }
}
session:  
No session data available
shopId: 
1

```

&nbsp;

&nbsp;

---

<div class="post-metadata">

**Author:** ![Kai23](https://avatars.discourse-cdn.com/v4/letter/k/c89c15/32.png) [@Kai23](https://forum.shopware.com/u/Kai23)\
**Post date:** [14. Februar 2017 um 19:13 UTC](https://forum.shopware.com/t/csrftokenvalidationexception/43680/2 "2017-02-14T19:13:32Z")

</div>

Noch einer:  
The provided X-CSRF-Token for path „/ticket/index/id/16“ is invalid.

```
ERROR

Message:  
exception 'Shopware\Components\CSRFTokenValidationException' with message 'The provided X-CSRF-Token for path "/ticket/index/id/16" is invalid. Please go back, reload the page and try again.' in /var/www/vhosts/shopware/docroot/engine/Shopware/Components/CSRFTokenValidator.php:158
Stack trace:
#0 [internal function]: Shopware\Components\CSRFTokenValidator->checkFrontendTokenValidation(Object(Enlight_Controller_ActionEventArgs))
#1 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Event/Handler/Default.php(91): call_user_func(Array, Object(Enlight_Controller_ActionEventArgs))
#2 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Event/EventManager.php(214): Enlight_Event_Handler_Default->execute(Object(Enlight_Controller_ActionEventArgs))
#3 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Action.php(143): Enlight_Event_EventManager->notify('Enlight_Control...', Object(Enlight_Controller_ActionEventArgs))
#4 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Dispatcher/Default.php(523): Enlight_Controller_Action->dispatch('indexAction')
#5 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Front.php(223): Enlight_Controller_Dispatcher_Default->dispatch(Object(Enlight_Controller_Request_RequestHttp), Object(Enlight_Controller_Response_ResponseHttp))
#6 /var/www/vhosts/shopware/docroot/engine/Shopware/Kernel.php(180): Enlight_Controller_Front->dispatch()
#7 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(487): Shopware\Kernel->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true)
#8 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(255): Symfony\Component\HttpKernel\HttpCache\HttpCache->forward(Object(Symfony\Component\HttpFoundation\Request), true, NULL)
#9 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(258): Shopware\Components\HttpCache\AppCache->forward(Object(Symfony\Component\HttpFoundation\Request), true)
#10 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(275): Symfony\Component\HttpKernel\HttpCache\HttpCache->pass(Object(Symfony\Component\HttpFoundation\Request), true)
#11 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(133): Symfony\Component\HttpKernel\HttpCache\HttpCache->invalidate(Object(Symfony\Component\HttpFoundation\Request), true)
#12 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(206): Shopware\Components\HttpCache\AppCache->invalidate(Object(Symfony\Component\HttpFoundation\Request), true)
#13 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(114): Symfony\Component\HttpKernel\HttpCache\HttpCache->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true)
#14 /var/www/vhosts/shopware/docroot/shopware.php(117): Shopware\Components\HttpCache\AppCache->handle(Object(Symfony\Component\HttpFoundation\Request))
#15 {main}
Time: 
2017-02-14T13:39:37.596148+0100
Channel:  
core
request:  
{
    "uri": "/ticket/index/id/16",
    "method": "POST",
    "query": {
        "module": "frontend",
        "controller": "ticket",
        "action": "index",
        "id": "16"
    },
    "post": {
        "forceMail": "0",
        "inquiry": "Ich habe folgende Fragen zum Artikel APS Brushless Outrunner Motor 6374 170KV 3200W mit Sensoren\r\n\r\nhallo,\r\n\r\nkann man welle mit laengerer welle austauschen, die jetzt 10mm durchmesser hat?\r\n\r\ndas ist sehr wichtig. bitte antworten sie mir.\r\n\r\nlg",
        "nachname": "l***",
        "anrede": "Herr",
        "telefon": "017699100942",
        "email": "c***@gmail.com",
        "vorname": "w***",
        "sRand": "lmmqrAzOLfaBzWfYw2fibUNPXMtum8Iv",
        "sCaptcha": "fda79",
        "Submit": "submit",
        "__csrf_token": "CpbIoq18dKcWMdSlTdAhVimxoq948R"
    }
}
session:  
No session data available
shopId: 
1
shopName: 
shopware

```

&nbsp;

---

<div class="post-metadata">

**Author:** ![SebastianKloepper](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.shopware.com/sebastiankloepper/32/21435_2.png) [@SebastianKloepper](https://forum.shopware.com/u/SebastianKloepper)\
**Post date:** [14. Februar 2017 um 19:19 UTC](https://forum.shopware.com/t/csrftokenvalidationexception/43680/3 "2017-02-14T19:19:18Z")

</div>

Hi,

kannst du den Fehler immer reproduzieren? Das scheint einer Erweiterung / Plugin oder generell das Theme nicht sauber zusammen mit dem Token zu funktionieren.

Bei Reproduzierbarkeit kann man z.B. auf das Standard Theme stellen und prüfen, ob es dann funktioniert. &nbsp;Auch kann man eventuell installierten Plugins deaktivieren und den Ablauf dann erneut prüfen.&nbsp;

Natürlich kann man auch den Sicherheitsmechanismus&nbsp;komplett deaktivieren, was aber maximal im Notfall gemacht werden sollte.

Siehe auch&nbsp;[https://forum.shopware.com/discussion/comment/185342/#Comment\_185342](https://forum.shopware.com/discussion/comment/185342/#Comment_185342)

Sebastian&nbsp;

---

<div class="post-metadata">

**Author:** ![Kai23](https://avatars.discourse-cdn.com/v4/letter/k/c89c15/32.png) [@Kai23](https://forum.shopware.com/u/Kai23)\
**Post date:** [14. Februar 2017 um 19:41 UTC](https://forum.shopware.com/t/csrftokenvalidationexception/43680/4 "2017-02-14T19:41:54Z")

</div>

Ich konnte den Fehler einmal über das Anfrage Formular&nbsp;reproduzieren.  
Nachdem ich aber zurück navigierte und das Formular nochmal abgesendet hatte kann ich den Fehler nicht mehr reproduzieren.  
Erst wenn ich den&nbsp;session-1 cookie lösche tritt der Fehler wieder auf.

Nebenfrage: kann man plugins / themes über die config.php deaktivieren? Dann könnte ich dort über eine Abfrage auf meine IP die Sachen live testen

---

<div class="post-metadata">

**Author:** ![Kai23](https://avatars.discourse-cdn.com/v4/letter/k/c89c15/32.png) [@Kai23](https://forum.shopware.com/u/Kai23)\
**Post date:** [15. Februar 2017 um 14:46 UTC](https://forum.shopware.com/t/csrftokenvalidationexception/43680/5 "2017-02-15T14:46:03Z")

</div>

Noch ein anderer

The provided X-CSRF-Token for path „/checkout/deleteArticle/sDelete/7800/sTargetAction/cart“ is invalid.

```
ERROR

Message:  
exception 'Shopware\Components\CSRFTokenValidationException' with message 'The provided X-CSRF-Token for path "/checkout/deleteArticle/sDelete/7800/sTargetAction/cart" is invalid. Please go back, reload the page and try again.' in /var/www/vhosts/shopware/docroot/engine/Shopware/Components/CSRFTokenValidator.php:158
Stack trace:
#0 [internal function]: Shopware\Components\CSRFTokenValidator->checkFrontendTokenValidation(Object(Enlight_Controller_ActionEventArgs))
#1 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Event/Handler/Default.php(91): call_user_func(Array, Object(Enlight_Controller_ActionEventArgs))
#2 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Event/EventManager.php(214): Enlight_Event_Handler_Default->execute(Object(Enlight_Controller_ActionEventArgs))
#3 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Action.php(143): Enlight_Event_EventManager->notify('Enlight_Control...', Object(Enlight_Controller_ActionEventArgs))
#4 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Dispatcher/Default.php(523): Enlight_Controller_Action->dispatch('deleteArticleAc...')
#5 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Front.php(223): Enlight_Controller_Dispatcher_Default->dispatch(Object(Enlight_Controller_Request_RequestHttp), Object(Enlight_Controller_Response_ResponseHttp))
#6 /var/www/vhosts/shopware/docroot/engine/Shopware/Kernel.php(180): Enlight_Controller_Front->dispatch()
#7 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(487): Shopware\Kernel->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true)
#8 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(255): Symfony\Component\HttpKernel\HttpCache\HttpCache->forward(Object(Symfony\Component\HttpFoundation\Request), true, NULL)
#9 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(258): Shopware\Components\HttpCache\AppCache->forward(Object(Symfony\Component\HttpFoundation\Request), true)
#10 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(275): Symfony\Component\HttpKernel\HttpCache\HttpCache->pass(Object(Symfony\Component\HttpFoundation\Request), true)
#11 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(133): Symfony\Component\HttpKernel\HttpCache\HttpCache->invalidate(Object(Symfony\Component\HttpFoundation\Request), true)
#12 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(206): Shopware\Components\HttpCache\AppCache->invalidate(Object(Symfony\Component\HttpFoundation\Request), true)
#13 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(114): Symfony\Component\HttpKernel\HttpCache\HttpCache->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true)
#14 /var/www/vhosts/shopware/docroot/shopware.php(117): Shopware\Components\HttpCache\AppCache->handle(Object(Symfony\Component\HttpFoundation\Request))
#15 {main}
Time: 
2017-02-15T12:44:00.336771+0100
Channel:  
core
request:  
{
    "uri": "/checkout/deleteArticle/sDelete/7800/sTargetAction/cart",
    "method": "POST",
    "query": {
        "module": "frontend",
        "controller": "checkout",
        "action": "deleteArticle",
        "sDelete": "7800",
        "sTargetAction": "cart"
    },
    "post": {
        "__csrf_token": "wgj38g5MhJjJDRmPJuUvNqh1PUheRu"
    }
}
session:  
No session data available
shopId: 
1
shopName: 
shopware

```

&nbsp;

---

<div class="post-metadata">

**Author:** ![Kai23](https://avatars.discourse-cdn.com/v4/letter/k/c89c15/32.png) [@Kai23](https://forum.shopware.com/u/Kai23)\
**Post date:** [15. Februar 2017 um 14:46 UTC](https://forum.shopware.com/t/csrftokenvalidationexception/43680/6 "2017-02-15T14:46:59Z")

</div>

Noch einer:

&nbsp;

The provided X-CSRF-Token for path „/account/login/sTarget/account/sTargetAction/index“ is invalid.

```
ERROR

Message:    
exception 'Shopware\Components\CSRFTokenValidationException' with message 'The provided X-CSRF-Token for path "/account/login/sTarget/account/sTargetAction/index" is invalid. Please go back, reload the page and try again.' in /var/www/vhosts/shopware/docroot/engine/Shopware/Components/CSRFTokenValidator.php:158
Stack trace:
#0 [internal function]: Shopware\Components\CSRFTokenValidator->checkFrontendTokenValidation(Object(Enlight_Controller_ActionEventArgs))
#1 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Event/Handler/Default.php(91): call_user_func(Array, Object(Enlight_Controller_ActionEventArgs))
#2 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Event/EventManager.php(214): Enlight_Event_Handler_Default->execute(Object(Enlight_Controller_ActionEventArgs))
#3 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Action.php(143): Enlight_Event_EventManager->notify('Enlight_Control...', Object(Enlight_Controller_ActionEventArgs))
#4 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Dispatcher/Default.php(523): Enlight_Controller_Action->dispatch('loginAction')
#5 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Front.php(223): Enlight_Controller_Dispatcher_Default->dispatch(Object(Enlight_Controller_Request_RequestHttp), Object(Enlight_Controller_Response_ResponseHttp))
#6 /var/www/vhosts/shopware/docroot/engine/Shopware/Kernel.php(180): Enlight_Controller_Front->dispatch()
#7 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(487): Shopware\Kernel->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true)
#8 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(255): Symfony\Component\HttpKernel\HttpCache\HttpCache->forward(Object(Symfony\Component\HttpFoundation\Request), true, NULL)
#9 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(258): Shopware\Components\HttpCache\AppCache->forward(Object(Symfony\Component\HttpFoundation\Request), true)
#10 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(275): Symfony\Component\HttpKernel\HttpCache\HttpCache->pass(Object(Symfony\Component\HttpFoundation\Request), true)
#11 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(133): Symfony\Component\HttpKernel\HttpCache\HttpCache->invalidate(Object(Symfony\Component\HttpFoundation\Request), true)
#12 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(206): Shopware\Components\HttpCache\AppCache->invalidate(Object(Symfony\Component\HttpFoundation\Request), true)
#13 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(114): Symfony\Component\HttpKernel\HttpCache\HttpCache->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true)
#14 /var/www/vhosts/shopware/docroot/shopware.php(117): Shopware\Components\HttpCache\AppCache->handle(Object(Symfony\Component\HttpFoundation\Request))
#15 {main}
Time:   
2017-02-15T07:38:50.810680+0100
Channel:    
core
request:    
{
    "uri": "/account/login/sTarget/account/sTargetAction/index",
    "method": "POST",
    "query": {
        "module": "frontend",
        "controller": "account",
        "action": "login",
        "sTarget": "account",
        "sTargetAction": "index"
    },
    "post": {
        "sTarget": "account",
        "email": "djdestiny@hotmail.de",
        "Submit": "",
        "__csrf_token": "BD7zQUZsmaTlPUeI4rnIDrbasgtiTZ"
    }
}
session:    
No session data available
shopId: 
1
shopName:   
shopware

```

&nbsp;

---

<div class="post-metadata">

**Author:** ![Kai23](https://avatars.discourse-cdn.com/v4/letter/k/c89c15/32.png) [@Kai23](https://forum.shopware.com/u/Kai23)\
**Post date:** [15. Februar 2017 um 14:53 UTC](https://forum.shopware.com/t/csrftokenvalidationexception/43680/7 "2017-02-15T14:53:26Z")

</div>

Plugins

```
bin/console sw:plugin:list
+------------------------------+-----------------------------------+---------+----------------------------------+--------+-----------+
| Plugin | Label | Version | Author | Active | Installed |
+------------------------------+-----------------------------------+---------+----------------------------------+--------+-----------+
| AdvancedMenu | Erweitertes Menü | 1 | shopware AG | Yes | Yes |
| BestitAmazonPaymentsAdvanced | Login und Bezahlen mit Amazon | 2.0.9 | best it Consulting GmbH & Co. KG | Yes | Yes |
| Cron | Cron | 1.0.0 | shopware AG | Yes | Yes |
| CronBirthday | CronBirthday | 1.0.0 | shopware AG | Yes | Yes |
| CronRating | CronRating | 1.0.0 | shopware AG | Yes | Yes |
| CronRefresh | CronRefresh | 1.0.0 | shopware AG | Yes | Yes |
| InputFilter | InputFilter | 1 | shopware AG | Yes | Yes |
| LastArticles | LastArticles | 1 | shopware AG | Yes | Yes |
| Notification | Notification | 1.0.0 | shopware AG | Yes | Yes |
| PluginManager | Plugin Manager | 1.0.0 | shopware AG | Yes | Yes |
| PmswCookieConsent | PmswCookieConsent | 1.0.0 | plugin.kaufen | Yes | Yes |
| ShopueGermanDu | Deutsch Du - Shopware Sprachpaket | 2.0.0 | Shop-Uebersetzungen.de | Yes | Yes |
| Statistics | Statistics | 1 | shopware AG | Yes | Yes |
| SwagAdvancedTinyMce | Erweiterter TinyMCE | 1.0.0 | shopware AG | Yes | Yes |
| SwagBackendOrder | Backend orders | 1.1.1 | shopware AG | Yes | Yes |
| SwagGoogle | Google Services | 2.0.7 | shopware AG | Yes | Yes |
| SwagImportExport | Shopware Import/Export | 2.0.2 | shopware AG | Yes | Yes |
| SwagPaymentPaypal | PayPal | 3.4.5 | shopware AG | Yes | Yes |
| SwagUpdate | Shopware Auto Update | 1.0.0 | shopware AG | Yes | Yes |
| ViisonDHL | DHL Adapter | 4.3.4 | VIISON GmbH | Yes | Yes |
| CronProductExport | CronProductExport | 1.0.0 | shopware AG | No | No |
| CronStock | CronStock | 1 | shopware AG | No | No |
| Debug | Debug | 1.0.0 | shopware AG | No | Yes |
| SofortPayment | SOFORT AG Shopware Module | 2.3.3 | Fatchip GmbH | No | No |
| SwagCookiePermission | Cookie permission | 1.1.0 | shopware AG | No | Yes |
| TagCloud | TagCloud | 1 | shopware AG | No | No |
+------------------------------+-----------------------------------+---------+----------------------------------+--------+-----------+

```

&nbsp;

SSL verwenden und&nbsp;  
SSL überall verwanden ist aktiviert in den Shopeinstellungen

---

<div class="post-metadata">

**Author:** ![Kai23](https://avatars.discourse-cdn.com/v4/letter/k/c89c15/32.png) [@Kai23](https://forum.shopware.com/u/Kai23)\
**Post date:** [15. Februar 2017 um 15:26 UTC](https://forum.shopware.com/t/csrftokenvalidationexception/43680/8 "2017-02-15T15:26:54Z")

</div>

Hilfe o\_0

The provided X-CSRF-Token for path „/account/login/sTarget/checkout/sTargetAction/shippingPayment“ is invalid.

```
ERROR

Message:  
exception 'Shopware\Components\CSRFTokenValidationException' with message 'The provided X-CSRF-Token for path "/account/login/sTarget/checkout/sTargetAction/shippingPayment" is invalid. Please go back, reload the page and try again.' in /var/www/vhosts/shopware/docroot/engine/Shopware/Components/CSRFTokenValidator.php:158
Stack trace:
#0 [internal function]: Shopware\Components\CSRFTokenValidator->checkFrontendTokenValidation(Object(Enlight_Controller_ActionEventArgs))
#1 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Event/Handler/Default.php(91): call_user_func(Array, Object(Enlight_Controller_ActionEventArgs))
#2 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Event/EventManager.php(214): Enlight_Event_Handler_Default->execute(Object(Enlight_Controller_ActionEventArgs))
#3 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Action.php(143): Enlight_Event_EventManager->notify('Enlight_Control...', Object(Enlight_Controller_ActionEventArgs))
#4 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Dispatcher/Default.php(523): Enlight_Controller_Action->dispatch('loginAction')
#5 /var/www/vhosts/shopware/docroot/engine/Library/Enlight/Controller/Front.php(223): Enlight_Controller_Dispatcher_Default->dispatch(Object(Enlight_Controller_Request_RequestHttp), Object(Enlight_Controller_Response_ResponseHttp))
#6 /var/www/vhosts/shopware/docroot/engine/Shopware/Kernel.php(180): Enlight_Controller_Front->dispatch()
#7 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(487): Shopware\Kernel->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true)
#8 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(255): Symfony\Component\HttpKernel\HttpCache\HttpCache->forward(Object(Symfony\Component\HttpFoundation\Request), true, NULL)
#9 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(258): Shopware\Components\HttpCache\AppCache->forward(Object(Symfony\Component\HttpFoundation\Request), true)
#10 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(275): Symfony\Component\HttpKernel\HttpCache\HttpCache->pass(Object(Symfony\Component\HttpFoundation\Request), true)
#11 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(133): Symfony\Component\HttpKernel\HttpCache\HttpCache->invalidate(Object(Symfony\Component\HttpFoundation\Request), true)
#12 /var/www/vhosts/shopware/docroot/vendor/symfony/http-kernel/HttpCache/HttpCache.php(206): Shopware\Components\HttpCache\AppCache->invalidate(Object(Symfony\Component\HttpFoundation\Request), true)
#13 /var/www/vhosts/shopware/docroot/engine/Shopware/Components/HttpCache/AppCache.php(114): Symfony\Component\HttpKernel\HttpCache\HttpCache->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true)
#14 /var/www/vhosts/shopware/docroot/shopware.php(117): Shopware\Components\HttpCache\AppCache->handle(Object(Symfony\Component\HttpFoundation\Request))
#15 {main}
Time: 
2017-02-15T16:23:19.056296+0100
Channel:  
core
request:  
{
    "uri": "/account/login/sTarget/checkout/sTargetAction/shippingPayment",
    "method": "POST",
    "query": {
        "module": "frontend",
        "controller": "account",
        "action": "login",
        "sTarget": "checkout",
        "sTargetAction": "shippingPayment"
    },
    "post": {
        "sTarget": "checkout",
        "email": "g **** @gmx.de",
        "Submit": "",
        "__csrf_token": "MDnOhSdd0TIAY1iPVr8Lr46I0Je7G4"
    }
}
session:  
No session data available
shopId: 
1
shopName: 
shopware

```

&nbsp;

---

<div class="post-metadata">

**Author:** ![Kai23](https://avatars.discourse-cdn.com/v4/letter/k/c89c15/32.png) [@Kai23](https://forum.shopware.com/u/Kai23)\
**Post date:** [15. Februar 2017 um 15:35 UTC](https://forum.shopware.com/t/csrftokenvalidationexception/43680/9 "2017-02-15T15:35:02Z")

</div>

> [@SebastianKlöpper schrieb:](https://forum.shopware.com/profile/66/SebastianKl%C3%B6pper "SebastianKl%C3%B6pper")
> 
> Natürlich kann man auch den Sicherheitsmechanismus&nbsp;komplett deaktivieren, was aber maximal im Notfall gemacht werden sollte.

Notfallmäßig habe ich das dann eben auch mal fürs frontend deaktiviert :-/  
Würde es aber schon gerne wieder aktivieren…