# CSRF token-related issues **URL:** \ **Category:** Mautic 4 Install/Upgrade Support\ **Tags:** community, development\ **Created:** [July 4, 2023, 8:52pm UTC](https://forum.mautic.org/t/csrf-token-related-issues/28513 "2023-07-04T20:52:59Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![team](https://avatars.discourse-cdn.com/v4/letter/t/b5a626/32.png) [@team](https://forum.mautic.org/u/team)\ **Post date:** [July 4, 2023, 8:52pm UTC](https://forum.mautic.org/t/csrf-token-related-issues/28513/1 "2023-07-04T20:52:59Z")
\*\* **Apache 2.4** **My Mautic version is: 45\_mautic-449** **My PHP version is: PHP 8.0** **My Database type and version is: MySQL 8.0** Hi everyone, **I. Issue** The Mautic password reset produced the following error message: [mautic.cfored.com](http://mautic.cfored.com) ```auto The CSRF token is invalid. Please try to resubmit the form. ``` **II. Description** We verified the latest version of Mautic (45\_mautic-449). Knowledge articles indicate that previous versions might have CSRF token-related issues. We checked the HTML code and confirmed that the CSRF token is set in the JavaScript variable `mauticAjaxCsrf`. The value of `mauticAjaxCsrf` is `5txTbW5W3hzvppBa8ukbT5MOmsGcsEEAEOBZ83pyApo`. This is the value of the CSRF token. The HTML code is as follows: ```html ``` See the captured screenshot image: ![2023-07-04 13.15.09 mautic.cfored.com d08296470eb2](https://us1.discourse-cdn.com/flex020/uploads/mautic/original/2X/d/d4c5295f5e90b1eb0dc28f79125726e399a4491a.png) **III. Request** Can you diagnose a workaround for the CSRF token being invalid so that I can reset and log into Mautic? I hope this is helpful! Let me know if you have any other questions. **Regards,** Harold ---
**Author:** ![dirk\_s](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/dirk_s/32/748_2.png) [@dirk\_s](https://forum.mautic.org/u/dirk_s)\ **Post date:** [July 5, 2023, 9:13am UTC](https://forum.mautic.org/t/csrf-token-related-issues/28513/2 "2023-07-05T09:13:27Z")
Hi, just to make sure: Could you please switch from http to https? Several issues are related to this simple hack. There is no useful way to use mautic with http only anyway. ---
**Author:** ![mzagmajster](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/mzagmajster/32/687_2.png) [@mzagmajster](https://forum.mautic.org/u/mzagmajster)\ **Post date:** [July 5, 2023, 12:12pm UTC](https://forum.mautic.org/t/csrf-token-related-issues/28513/3 "2023-07-05T12:12:47Z")
Adding on top of @dirk_s answer, if the issue happens to persist try force refreshing your page and submitting then. ---
**Author:** ![team](https://avatars.discourse-cdn.com/v4/letter/t/b5a626/32.png) [@team](https://forum.mautic.org/u/team)\ **Post date:** [July 5, 2023, 1:25pm UTC](https://forum.mautic.org/t/csrf-token-related-issues/28513/4 "2023-07-05T13:25:07Z")
Thank you, Dirk\_s and Mzagmajster! The issue is resolved. Is there a Mautic Cron Job Setup to mitigate these token events? ---
**Author:** ![mzagmajster](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/mzagmajster/32/687_2.png) [@mzagmajster](https://forum.mautic.org/u/mzagmajster)\ **Post date:** [July 5, 2023, 2:27pm UTC](https://forum.mautic.org/t/csrf-token-related-issues/28513/5 "2023-07-05T14:27:51Z")
Not as far as I know, but as @dirk_s said I would force to always use https. As for the force refresh part - I encountered this issue some time ago with the login page. I solved this in a way that I always forced login page refresh and so CSRF token was regenerated. ---
**Author:** ![team](https://avatars.discourse-cdn.com/v4/letter/t/b5a626/32.png) [@team](https://forum.mautic.org/u/team)\ **Post date:** [July 5, 2023, 2:52pm UTC](https://forum.mautic.org/t/csrf-token-related-issues/28513/6 "2023-07-05T14:52:11Z")
Thanks again, Mzagmajster! ---
**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/mautic/original/1X/43c63600fe51440378769136903f1fa2a9a34102.png) [@system](https://forum.mautic.org/u/system)\ **Post date:** [July 7, 2023, 2:52am UTC](https://forum.mautic.org/t/csrf-token-related-issues/28513/7 "2023-07-07T02:52:43Z")
This topic was automatically closed 36 hours after the last reply. New replies are no longer allowed.