Hello,
for security purposes, a unique token is generated every time the form is shown. That token is a unique identifier that has a limited time span, usually of less than an hour, probably around 30 minutes or less.

So if you load your login page and then leave it open a while before trying to log in, you will get that message as the token will have expired.

BUT, if you reload the page and log in right away, you should definitely not get that error

Hi,
Thank you for your reply. Unfortunately its nothing to do with time as i acnt login at all eben by refreshing the login page. I was messing around with the canonical url setting and that is when this issue started so Im quite sure it is related to that. As the site is actualy loading im not sure where the issue is .. any help will be much appreciated

thanks

ok so 2questions for you:
1- what did you do to the canonical url?
2- did you empty the cache?

Hi,

Thanks for your reply.
I have a second domain (spelt differently) which is why i use the canonical url.
I cleared the cache manually but problem still exists.

The url is maltanauticallicence.com/index.php/login

Any other ideas ?

Thank you

ok found the error in public_html/application/config/generated_overrides/concrete.php

changed the url in this file and all is good now. :)

That's great! Congrats on taking one more step towards Concrete5 mastery :)

We are also having the same issue. I have checked the canonical url and it's set correctly tohttp://www.atlantacenter.net/index.php...

We have a login system that is SSO based that works on the sign in & register link at the top of the site. The backend C5 login system is what we use to login the test users & the "Super" Admin user. Today I noticed the invalid form token link. I have moved the login page fromhttp://www.atlantacenter.net/index.php/login... to http://www.atlantacenter.net/index.php/c5login.... Everything was working fine using this and then today we noticed the error.

Is there anyway to troubleshoot this? I've tried dropping site cache, using a browser in private mode, using IE (which I never ever use, so I know I've never been to that page before in that browser), and tried the obvious refresh the form and try again.

In case anybody else runs into this issue - I had the same thing going, I had my cannonical urls set tohttp://mysite.com
but my server was resolving everything fromhttp://mysite.com tohttp://www.mysite.com
that was all that needed to be fixed - at least in my case

What exactly did you fix, and where?