{"action":"created","issue":{"url":"https://api.github.com/repos/danpros/htmly/issues/183","labels_url":"https://api.github.com/repos/danpros/htmly/issues/183/labels{/name}","comments_url":"https://api.github.com/repos/danpros/htmly/issues/183/comments","events_url":"https://api.github.com/repos/danpros/htmly/issues/183/events","html_url":"https://github.com/danpros/htmly/issues/183","id":99598186,"number":183,"title":"CSRF Problem login Page (CF --> Nginx --> Apache)","user":{"login":"snapo","id":6347922,"avatar_url":"https://avatars.githubusercontent.com/u/6347922?v=3","gravatar_id":"","url":"https://api.github.com/users/snapo","html_url":"https://github.com/snapo","followers_url":"https://api.github.com/users/snapo/followers","following_url":"https://api.github.com/users/snapo/following{/other_user}","gists_url":"https://api.github.com/users/snapo/gists{/gist_id}","starred_url":"https://api.github.com/users/snapo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/snapo/subscriptions","organizations_url":"https://api.github.com/users/snapo/orgs","repos_url":"https://api.github.com/users/snapo/repos","events_url":"https://api.github.com/users/snapo/events{/privacy}","received_events_url":"https://api.github.com/users/snapo/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2015-08-07T07:46:51Z","updated_at":"2015-08-08T13:20:17Z","closed_at":null,"body":"Hello Htmly,\r\nI know there is no support and i have a slight ugly constellation but maybe you guys could help me out to get it running. My Setup is as follow:\r\n\r\n[Cloudflare]->[Nginx]->[Apache2]\r\n\r\nNginx is used as a reverse proxy for apache2 (no caching activated) and Cloudflare is used as worldwide CDN. Everything except for the login works.\r\n\r\nUsing Apache2 directly the login works.\r\nUsing Nginx directly to login does not work.\r\nUsing CF directly with apache without nginx, login works.\r\n\r\nThe only problem im figuring at the moment is that if i press the login Button it always pops up the CSRF error. So the Cross Site Scrpting Key is not transmitted somehow. \r\n\r\nIs the Key set to a cookie? or only as the post request for login?\r\nDo you compare the ip to the csrf value?\r\n\r\nIf anyone could help me or tell me where else i should search, that would be great.\r\n\r\nBest regards"},"comment":{"url":"https://api.github.com/repos/danpros/htmly/issues/comments/128979849","html_url":"https://github.com/danpros/htmly/issues/183#issuecomment-128979849","issue_url":"https://api.github.com/repos/danpros/htmly/issues/183","id":128979849,"user":{"login":"danpros","id":595983,"avatar_url":"https://avatars.githubusercontent.com/u/595983?v=3","gravatar_id":"","url":"https://api.github.com/users/danpros","html_url":"https://github.com/danpros","followers_url":"https://api.github.com/users/danpros/followers","following_url":"https://api.github.com/users/danpros/following{/other_user}","gists_url":"https://api.github.com/users/danpros/gists{/gist_id}","starred_url":"https://api.github.com/users/danpros/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/danpros/subscriptions","organizations_url":"https://api.github.com/users/danpros/orgs","repos_url":"https://api.github.com/users/danpros/repos","events_url":"https://api.github.com/users/danpros/events{/privacy}","received_events_url":"https://api.github.com/users/danpros/received_events","type":"User","site_admin":false},"created_at":"2015-08-08T13:20:17Z","updated_at":"2015-08-08T13:20:17Z","body":"I can login by using the same setup as yours. This is session problems also, try\r\n````\r\nchown -R apache:apache /var/lib/php/session\r\n````"}}