5,605,766 Members 48,004 Now Online
XDA Developers Android and Mobile Development Forum

Quick reply issues: expired tocken, double post

Tip us?
 
V@no
Old
#1  
V@no's Avatar
Senior Member - OP
Thanks Meter 166
Posts: 1,303
Join Date: Sep 2007
Exclamation Quick reply issues: expired tocken, double post

Hello.
I hope this is the right place for discussing issues of this forum. If not, my apologizes in advance.


1) if you leave a topic opened in browser for a quiet some time (a day or two) and then attempt post a quick reply, not only it doesn't let you post it with message "token expired" but also you loose what you just typed, because by hitting back button it clears up and locks up the quick reply field. A work around for me is to use 3nd party addon for Firefox Lazarus: Form Recovery. Would be nice if this issue was addressed in forum itself, for example instead of just showing this error message redirect to advanced reply form, as it does in issue #2:

2) about 2 or so month ago I've noticed that every time I try post using quick reply field, it end up with message
Quote:
This forum requires that you wait 20 seconds between posts. Please try again in 19 seconds.
and advanced reply form underneath, but at the same time the message actually get posted fine. It's like clicking on submit button executes submit twice. Don't get this issue with advanced reply form.


Thank you.
 
donpippo
Old
(Last edited by donpippo; 8th January 2014 at 03:33 PM.)
#2  
donpippo's Avatar
Member
Thanks Meter 12
Posts: 75
Join Date: Jan 2012
I have the same problem. It was reported in October
http://forum.xda-developers.com/show....php?t=2478243

Opening Developer Tools in Google Chrome, I can see that after "post quick reply" two POST are send
 
bitpushr
Old
#3  
bitpushr's Avatar
XDA:Administrator
Thanks Meter 1065
Posts: 898
Join Date: Mar 2007
Quote:
Originally Posted by donpippo View Post
I have the same problem. It was reported in October
http://forum.xda-developers.com/show....php?t=2478243

Opening Developer Tools in Google Chrome, I can see that after "post quick reply" two POST are send
Thanks for the info - what plugins do you use?

I haven't been able to re-create this issue but there are a number of people reporting it.

The second POST doesn't indicate who initiated it. The first one is the correct one for quick posting the reply though.
Current Phone: Nexus 5 (4.4.1) | Oppo Find 5 (Omni)

Past Phones: Nexus 4, Samsung Galaxy SIII i9300, HTC One X, Galaxy Note, iPhone 4S, 4, 3G, 3 (Jailbroken), Motorola V360, HTC TyTN
Past Tablets/Devices: Arnova 10G2, Asus EEEPC 900a, IBM/Lenovo Thinkpads
 
V@no
Old
(Last edited by V@no; 8th January 2014 at 04:20 PM.)
#4  
V@no's Avatar
Senior Member - OP
Thanks Meter 166
Posts: 1,303
Join Date: Sep 2007
I could reproduce it in different browsers (not 100% though), this means it's not plugin related

[EDIT]
Even though I didn't get the double post issue this time, but here is the detailed information from Live HTTP Headers extension for Firefox: (I replaced some sensitive data with <removed> tag)
Code:
http://forum.xda-developers.com/newreply.php?do=postreply&t=2593689

POST /newreply.php?do=postreply&t=2593689 HTTP/1.1
Host: forum.xda-developers.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:26.0) Gecko/20100101 Firefox/26.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.7,ru;q=0.3
Accept-Encoding: gzip, deflate
DNT: 1
X-Requested-With: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: http://forum.xda-developers.com/showthread.php?p=49241748
Content-Length: 404
Cookie: bblastvisit=1388113345; bblastactivity=0; bbuserid=620411; bbpassword=<removed>; compactview=0; tab=top; vbulletin_collapse=forumbit_2540%0AThanks_47472268%0AThanks_47561416; cX_P=1377149517077967602642; xda_wikiUserID=317811; xda_wikiUserName=V%40no; xda_wikiToken=<removed>; __ktp=<removed>; visited=1; vbulletin_userlist_hide_avatars_incomingreqs=0; vbulletin_userlist_hide_avatars_buddylist=0; bbsessionhash=<removed>; cX_S=13891938285901641944020; xdaloggedin=1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
securitytoken=<removed>&ajax=1&ajax_lastpost=1389197237&message=I%20can%20reproduce%20it%20different%20browsers%2C%20this%20means%20it%27s%20not%20plugin%20related&wysiwyg=0&styleid=0&signature=1&fromquickreply=1&s=&securitytoken=<removed>&do=postreply&t=2593689&p=49241748&specifiedpost=1&parseurl=1&loggedinuser=620411



HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Jan 2014 16:10:06 GMT
Content-Type: text/xml; charset=windows-1252
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: private
Pragma: private
X-UA-Compatible: IE=7
Set-Cookie: xdaloggedin=1; expires=Wed, 08-Jan-2014 16:25:06 GMT; path=/
Set-Cookie: visited=1; expires=Sun, 04-May-2014 09:56:46 GMT; path=/
XDA-No-Cache: 1
Content-Encoding: gzip
----------------------------------------------------------


http://forum.xda-developers.com/newreply.php?do=postreply&t=2593689

POST /newreply.php?do=postreply&t=2593689 HTTP/1.1
Host: forum.xda-developers.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:26.0) Gecko/20100101 Firefox/26.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.7,ru;q=0.3
Accept-Encoding: gzip, deflate
DNT: 1
Referer: http://forum.xda-developers.com/showthread.php?p=49241748
Cookie: bblastvisit=1388113345; bblastactivity=0; bbuserid=620411; bbpassword=<removed>; compactview=0; tab=top; vbulletin_collapse=forumbit_2540%0AThanks_47472268%0AThanks_47561416; cX_P=1377149517077967602642; xda_wikiUserID=317811; xda_wikiUserName=V%40no; xda_wikiToken=<removed>;  __ktp=<removed>; visited=1; vbulletin_userlist_hide_avatars_incomingreqs=0; vbulletin_userlist_hide_avatars_buddylist=0; bbsessionhash=<removed>; cX_S=13891938285901641944020; xdaloggedin=1
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 299
message=I+can+reproduce+it+different+browsers%2C+this+means+it%27s+not+plugin+related&wysiwyg=0&styleid=0&signature=1&fromquickreply=1&s=&securitytoken=<removed>&do=postreply&t=2593689&p=49241748&specifiedpost=1&parseurl=1&loggedinuser=620411&ajaxqrfailed=1



HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 08 Jan 2014 16:10:07 GMT
Content-Type: text/html; charset=ISO-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private
Pragma: private
X-UA-Compatible: IE=7
Set-Cookie: xdaloggedin=1; expires=Wed, 08-Jan-2014 16:25:07 GMT; path=/
Set-Cookie: visited=1; expires=Sun, 04-May-2014 09:56:47 GMT; path=/
XDA-No-Cache: 1
Location: http://forum.xda-developers.com/showthread.php?t=2593689&goto=newpost
 
donpippo
Old
#5  
donpippo's Avatar
Member
Thanks Meter 12
Posts: 75
Join Date: Jan 2012
Now I'm testing from an incognito chrome tab (so no extension enabled)

edit
From incognito tab, with no extensions enabled I don't have this issue.

---------- Post added at 07:21 PM ---------- Previous post was at 07:16 PM ----------

incognito tab with only adblock plus enabled

edit
I have double post issue
Maybe is ABP faults?
 
bilal_liberty
Old
#6  
bilal_liberty's Avatar
Recognized Developer / Contributor
Thanks Meter 9944
Posts: 3,104
Join Date: Aug 2012

 
DONATE TO ME
+1 OP, I too experience the problem of the twice post by posting using quick reply option. My browser is chrome.
ROM: Liberty-Rom
Radio 1.35a
kernel: Liberty Kernel
 
bitpushr
Old
#7  
bitpushr's Avatar
XDA:Administrator
Thanks Meter 1065
Posts: 898
Join Date: Mar 2007
We just fixed an issue with the XML that was returned, basically, it was malformed because of an extra line - and the way the Quick Reply button works in Javascript is that it if it thinks the XML/ajax request fails, it tries to do a normal post. But since the first post actually was fine, it attempts a double post. Which is why you see an error.

Can you check to see if the double-post issue is fixed now?
Current Phone: Nexus 5 (4.4.1) | Oppo Find 5 (Omni)

Past Phones: Nexus 4, Samsung Galaxy SIII i9300, HTC One X, Galaxy Note, iPhone 4S, 4, 3G, 3 (Jailbroken), Motorola V360, HTC TyTN
Past Tablets/Devices: Arnova 10G2, Asus EEEPC 900a, IBM/Lenovo Thinkpads
 
V@no
Old
#8  
V@no's Avatar
Senior Member - OP
Thanks Meter 166
Posts: 1,303
Join Date: Sep 2007
So far so good, no duplicates.

Any words regarding the token issue? A simple redirection to advanced form where it would show the error message, but kept your typed text would suffice.
 
bitpushr
Old
#9  
bitpushr's Avatar
XDA:Administrator
Thanks Meter 1065
Posts: 898
Join Date: Mar 2007
Quote:
Originally Posted by V@no View Post
So far so good, no duplicates.

Any words regarding the token issue? A simple redirection to advanced form where it would show the error message, but kept your typed text would suffice.
We consider this more a security concern in that we wouldn't allow the post if the browser has been idle for a long period of time. For that reason and since it is a core vBulletin function we consider that it works as intended.
Current Phone: Nexus 5 (4.4.1) | Oppo Find 5 (Omni)

Past Phones: Nexus 4, Samsung Galaxy SIII i9300, HTC One X, Galaxy Note, iPhone 4S, 4, 3G, 3 (Jailbroken), Motorola V360, HTC TyTN
Past Tablets/Devices: Arnova 10G2, Asus EEEPC 900a, IBM/Lenovo Thinkpads
 
V@no
Old
#10  
V@no's Avatar
Senior Member - OP
Thanks Meter 166
Posts: 1,303
Join Date: Sep 2007
Quote:
Originally Posted by bitpushr View Post
We consider this more a security concern in that we wouldn't allow the post if the browser has been idle for a long period of time. For that reason and since it is a core vBulletin function we consider that it works as intended.
The problem is browser (at least Firefox) saves data in forms even after page refresh, this means even if you keep refreshing the page all the time, the token will eventually expire, unless you clear the cache or move on to another page and go back without using browser's history.
Basically, you don't have to be idle to loose what you just typed.

Or at least don't clear the quick reply field when you get back from error page...

Thank you.

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


XDA PORTAL POSTS

UnbelovedHosts Uses Xposed to Block Unwanted Connections

First popularized by mvps, hosts-based ad blocking has become the de facto standard … more

March of the Droids 2014 Just Two Weeks Away; It’s Not Too Late to Register

If you want to attend an Android developers’ … more

Android App Review: Auto Config Free – XDA Developer TV

In this weeks episode of XDA Xposed Tuesday, we talked about customization of … more

Cloupload is a Beautiful and Fully Functional CloudApp Client for Android

If you’re a Mac OS X user who frequently uploads screenshots, … more