# Fehlermeldungen: The provided X-CSRF-Token for path "/xmlrpc.php" is invalid. Please go back, reload

**URL:** <https://forum.shopware.com/t/fehlermeldungen-the-provided-x-csrf-token-for-path-xmlrpc-php-is-invalid-please-go-back-reload/62046>\
**Category:** Allgemein\
**Created:** [28. September 2019 um 11:02 UTC](https://forum.shopware.com/t/fehlermeldungen-the-provided-x-csrf-token-for-path-xmlrpc-php-is-invalid-please-go-back-reload/62046 "2019-09-28T11:02:03Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Anatoli](https://avatars.discourse-cdn.com/v4/letter/a/71c47a/32.png) [@Anatoli](https://forum.shopware.com/u/Anatoli)\
**Post date:** [28. September 2019 um 11:02 UTC](https://forum.shopware.com/t/fehlermeldungen-the-provided-x-csrf-token-for-path-xmlrpc-php-is-invalid-please-go-back-reload/62046/1 "2019-09-28T11:02:03Z")

</div>

Hallo.

Ich bekomme seit 3-4 Wochen folgende Fehlermeldungen:

```
ERROR
Message: 	

Shopware\Components\CSRFTokenValidationException: The provided X-CSRF-Token for path "/wp-admin/admin-post.php?page=301bulkoptions" is invalid. Please go back, reload the page and try again. in /home/www/Shopware/engine/Shopware/Components/CSRFTokenValidator.php:144
Stack trace:
#0 /home/www/Shopware/engine/Library/Enlight/Event/Handler/Default.php(91): Shopware\Components\CSRFTokenValidator->checkFrontendTokenValidation(Object(Enlight_Controller_ActionEventArgs))
#1 /home/www/Shopware/engine/Library/Enlight/Event/EventManager.php(219): Enlight_Event_Handler_Default->execute(Object(Enlight_Controller_ActionEventArgs))
#2 /home/www/Shopware/engine/Library/Enlight/Controller/Action.php(175): Enlight_Event_EventManager->notify('Enlight_Control...', Object(Enlight_Controller_ActionEventArgs))
#3 /home/www/Shopware/engine/Library/Enlight/Controller/Dispatcher/Default.php(563): Enlight_Controller_Action->dispatch('indexAction')
#4 /home/www/Shopware/engine/Library/Enlight/Controller/Front.php(222): Enlight_Controller_Dispatcher_Default->dispatch(Object(Enlight_Controller_Request_RequestHttp), Object(Enlight_Controller_Response_ResponseHttp))
#5 /home/www/Shopware/engine/Shopware/Kernel.php(202): Enlight_Controller_Front->dispatch()
#6 /home/www/Shopware/vendor/symfony/http-kernel/HttpCache/SubRequestHandler.php(102): Shopware\Kernel->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true)
#7 /home/www/Shopware/vendor/symfony/http-kernel/HttpCache/HttpCache.php(448): Symfony\Component\HttpKernel\HttpCache\SubRequestHandler::handle(Object(Shopware\Kernel), Object(Symfony\Component\HttpFoundation\Request), 1, true)
#8 /home/www/Shopware/engine/Shopware/Components/HttpCache/AppCache.php(260): Symfony\Component\HttpKernel\HttpCache\HttpCache->forward(Object(Symfony\Component\HttpFoundation\Request), true, NULL)
#9 /home/www/Shopware/vendor/symfony/http-kernel/HttpCache/HttpCache.php(238): Shopware\Components\HttpCache\AppCache->forward(Object(Symfony\Component\HttpFoundation\Request), true)
#10 /home/www/Shopware/vendor/symfony/http-kernel/HttpCache/HttpCache.php(255): Symfony\Component\HttpKernel\HttpCache\HttpCache->pass(Object(Symfony\Component\HttpFoundation\Request), true)
#11 /home/www/Shopware/engine/Shopware/Components/HttpCache/AppCache.php(142): Symfony\Component\HttpKernel\HttpCache\HttpCache->invalidate(Object(Symfony\Component\HttpFoundation\Request), true)
#12 /home/www/Shopware/vendor/symfony/http-kernel/HttpCache/HttpCache.php(181): Shopware\Components\HttpCache\AppCache->invalidate(Object(Symfony\Component\HttpFoundation\Request), true)
#13 /home/www/Shopware/engine/Shopware/Components/HttpCache/AppCache.php(116): Symfony\Component\HttpKernel\HttpCache\HttpCache->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true)
#14 /home/www/Shopware/shopware.php(122): Shopware\Components\HttpCache\AppCache->handle(Object(Symfony\Component\HttpFoundation\Request))
#15 {main}

request: 	

{
    "uri": "/wp-admin/admin-post.php?page=301bulkoptions",
    "method": "POST",
    "query": {
        "page": "301bulkoptions",
        "module": "frontend",
        "controller": "wp-admin",
        "action": "admin-post.php"
    },
    "post": {
        "_wp_http_referer": "/wp-admin/options-general.php?page=301bulkoptions",
        "submit_bulk_301": "1",
        "auto_detect_end_line": "0",
        "wpnonce": "887cc0cb2f"
    }
}

```

Es kommen ungefähr 10 an einem Tag. Alle Meldungen unterscheiden sich bis auf das **“wp-admin”.**

Und heute kamm eine ganz andere Fehlermeldung:

```
ERROR
Message: 	

Shopware\Components\CSRFTokenValidationException: The provided X-CSRF-Token for path "/xmlrpc.php" is invalid. Please go back, reload the page and try again. in /home/www/Shopware/engine/Shopware/Components/CSRFTokenValidator.php:144
Stack trace:
#0 /home/www/Shopware/engine/Library/Enlight/Event/Handler/Default.php(91): Shopware\Components\CSRFTokenValidator->checkFrontendTokenValidation(Object(Enlight_Controller_ActionEventArgs))
#1 /home/www/Shopware/engine/Library/Enlight/Event/EventManager.php(219): Enlight_Event_Handler_Default->execute(Object(Enlight_Controller_ActionEventArgs))
#2 /home/www/Shopware/engine/Library/Enlight/Controller/Action.php(175): Enlight_Event_EventManager->notify('Enlight_Control...', Object(Enlight_Controller_ActionEventArgs))
#3 /home/www/Shopware/engine/Library/Enlight/Controller/Dispatcher/Default.php(563): Enlight_Controller_Action->dispatch('indexAction')
#4 /home/www/Shopware/engine/Library/Enlight/Controller/Front.php(222): Enlight_Controller_Dispatcher_Default->dispatch(Object(Enlight_Controller_Request_RequestHttp), Object(Enlight_Controller_Response_ResponseHttp))
#5 /home/www/Shopware/engine/Shopware/Kernel.php(202): Enlight_Controller_Front->dispatch()
#6 /home/www/Shopware/vendor/symfony/http-kernel/HttpCache/SubRequestHandler.php(102): Shopware\Kernel->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true)
#7 /home/www/Shopware/vendor/symfony/http-kernel/HttpCache/HttpCache.php(448): Symfony\Component\HttpKernel\HttpCache\SubRequestHandler::handle(Object(Shopware\Kernel), Object(Symfony\Component\HttpFoundation\Request), 1, true)
#8 /home/www/Shopware/engine/Shopware/Components/HttpCache/AppCache.php(260): Symfony\Component\HttpKernel\HttpCache\HttpCache->forward(Object(Symfony\Component\HttpFoundation\Request), true, NULL)
#9 /home/www/Shopware/vendor/symfony/http-kernel/HttpCache/HttpCache.php(238): Shopware\Components\HttpCache\AppCache->forward(Object(Symfony\Component\HttpFoundation\Request), true)
#10 /home/www/Shopware/vendor/symfony/http-kernel/HttpCache/HttpCache.php(255): Symfony\Component\HttpKernel\HttpCache\HttpCache->pass(Object(Symfony\Component\HttpFoundation\Request), true)
#11 /home/www/Shopware/engine/Shopware/Components/HttpCache/AppCache.php(142): Symfony\Component\HttpKernel\HttpCache\HttpCache->invalidate(Object(Symfony\Component\HttpFoundation\Request), true)
#12 /home/www/Shopware/vendor/symfony/http-kernel/HttpCache/HttpCache.php(181): Shopware\Components\HttpCache\AppCache->invalidate(Object(Symfony\Component\HttpFoundation\Request), true)
#13 /home/www/Shopware/engine/Shopware/Components/HttpCache/AppCache.php(116): Symfony\Component\HttpKernel\HttpCache\HttpCache->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true)
#14 /home/www/Shopware/shopware.php(122): Shopware\Components\HttpCache\AppCache->handle(Object(Symfony\Component\HttpFoundation\Request))
#15 {main}

Channel: 	

core

request: 	

{
    "uri": "/xmlrpc.php",
    "method": "POST",
    "query": {
        "module": "frontend",
        "controller": "xmlrpc.php",
        "action": "index"
    },
    "post": []
}

```

Jetzt habe ich auch eine Datei “phpstan.neon” im Shopordner.

Was kann es bedeuten? Versucht da jemand meinen Shop zu hacken?

Vielen dank im voraus!

MfG. Anatoli

---

<div class="post-metadata">

**Author:** ![Anatoli](https://avatars.discourse-cdn.com/v4/letter/a/71c47a/32.png) [@Anatoli](https://forum.shopware.com/u/Anatoli)\
**Post date:** [28. September 2019 um 11:03 UTC](https://forum.shopware.com/t/fehlermeldungen-the-provided-x-csrf-token-for-path-xmlrpc-php-is-invalid-please-go-back-reload/62046/2 "2019-09-28T11:03:15Z")

</div>

Hier ist der inhalt der phpstan.neon Datei:

```
includes:
    #- ../vendor/phpstan/phpstan-phpunit/rules.neon
    #- ../vendor/phpstan/phpstan-phpunit/extension.neon
    #- ../vendor/phpstan/phpstan-doctrine/extension.neon
parameters:
    level: 3

    autoload_directories:
        - %currentWorkingDirectory%/var/cache
        - %currentWorkingDirectory%/engine/Library
    autoload_files:
        - %currentWorkingDirectory%/vendor/autoload.php

    paths:
        - %currentWorkingDirectory%/engine/Shopware
    excludes_analyse:
        - %currentWorkingDirectory%/engine/Shopware/Plugins
        - %currentWorkingDirectory%/engine/Shopware/Configs/Default.php
        # The following are added because of the Hack in Document/Document
        - %currentWorkingDirectory%/engine/Shopware/Models/Order/Document/Document.php
        - %currentWorkingDirectory%/engine/Shopware/Components/Api/Resource/Order.php
        - %currentWorkingDirectory%/engine/Shopware/Components/Document.php
        - %currentWorkingDirectory%/engine/Shopware/Controllers/Api/Orders.php
        - %currentWorkingDirectory%/engine/Shopware/Controllers/Backend/CanceledOrder.php
        - %currentWorkingDirectory%/engine/Shopware/Controllers/Backend/Order.php
        - %currentWorkingDirectory%/engine/Shopware/Models/Order/Detail.php
        - %currentWorkingDirectory%/engine/Shopware/Models/Order/Order.php
        - %currentWorkingDirectory%/engine/Shopware/Models/Order/OrderHistorySubscriber.php
        - %currentWorkingDirectory%/engine/Shopware/Models/Order/Repository.php
        - %currentWorkingDirectory%/engine/Shopware/Bundle/EsBackendBundle/Subscriber/OrmBacklogSubscriber.php

    ignoreErrors:
        - '#apcu_#'
        - '#ioncube_#'
        - '#opcache_#'
        - '#imagettftext#'
        - '#class Redis#'

        - '#Call to an undefined method#'
        - '#Access to an undefined property#'
        - '#Method Symfony\\Component\\DependencyInjection\\LazyProxy\\PhpDumper\\DumperInterface\:\:getProxyFactoryCode\(\)#'
        - '#Shopware_Components_Snippet_Manager::__construct\(\) does not call parent constructor from Enlight_Components_Snippet_Manager#'
        - '#does not call parent constructor from Enlight_Class#'
        - '#Binary operation "|=" between string and string results in an error.#'
        - '#does not call parent constructor from Elasticsearch#'
        - '#does not accept Doctrine\\ORM\\EntityRepository#'
        # "getRepository"-Methods
        - '#should return [a-zA-Z\\_]+Repository but returns Doctrine\\ORM\\EntityRepository#'
        # Return values in Models
        - '# returns Shopware\\Components\\Model\\ModelEntity.#'
        - '#does not accept Shopware\\Components\\Api\\Resource\\Resource#'
        - '# but returns Doctrine\\ORM\\QueryBuilder#'
        # Model properties with wrong default values
        - '#\([a-z]+\) does not accept default value of type [a-z]+\.#'
        # Models that are detached by cloning and nulling the id
        - '#\([a-z]+\) does not accept null\.#'
        - '#supplied for foreach, only iterables are supported#'

    reportUnmatchedIgnoredErrors: false

```

&nbsp;