Was trying to update some gallery descriptions today, but each time I received a red message saying "Cross site request forgery blocked."
Doing a quick search for that error on here, I saw a suggestion from acrylian to clear the browser's cookies & cache. Did that. Was predictably prompted to log-in to the admin control panel again. But strangely my password ceased to work. Additionally the reset security question - correctly answered - just flipped me back to the main login screen without changing anything. Same with the "reset by email" option. So now I'm completely unable to login.
Not sure exactly what version I'm running as I can't login. A version from late November. It worked just fine until now, AFAIK no updates made in the meantime...
Comments
Best you check the version. Late November should have been 1.4.1.6, but if not maybe your site was hacked.
I suspect something like that since it is a new occurrance and seems to be behaving as if something is going wrong with URL interpretations. That might be caused by a bad .htaccess file. You might try removing .htaccess and see what happens. (Of course mod_rewrite on the front end will not work. The back end does not use mod_rewrite.)
The other thing to check is for PHP errors.
http://photosbyphil.net/photos2012
and my choices are login or reset.
We are glad you are up and running, but any issues should be taken up with Softdilicious.