Page 1 of 1

Forgot or Resend password

Posted: 30 Mar 2025, 02:25
by gordonisnz
Hello. Ive had mantis a few years (but havn't used it - I even disabled/removed the mantis subdirectory, but all the files are intact. No one could access it).

Ive now restored the mantis subdirectory, but cannot log-in.

1) when i use FORGET PASSWORD, i get an error

APPLICATION ERROR #2800

Invalid form security token. This could be caused by a session timeout, or accidentally submitting the form twice.

Please use the "Back" button in your web browser to return to the previous page. There you can correct whatever problems were identified in this error or select another action. You can also click an option from the menu bar to go directly to a new section.

2) I see that my admin password in the mantis_user_table is encrypted - Where can i go to encrypt my password & update the table with my new password ?

3) where can i go to see which version I have? I think its 2022 something.

Is it worth deleting the whole mantis directory & database/tables & downloading / installing again ? (There is nothing in the old mantis i want to keep).

How / where do i download the latest version ?

Re: Forgot or Resend password

Posted: 30 Mar 2025, 03:45
by gordonisnz
FURTHER: I've deleted the MYSQL tables in the mantis database
- I've removed the old mantis directory in the server

I've downloaded the latest MANTIS files & installed all the MYSQL tables etc

I *CAN* Log in - but when i change my password, i get:

APPLICATION ERROR #2800

Invalid form security token. This could be caused by a session timeout, or accidentally submitting the form twice.

Please use the "Back" button in your web browser to return to the previous page. There you can correct whatever problems were identified in this error or select another action. You can also click an option from the menu bar to go directly to a new section.

Re: Forgot or Resend password

Posted: 30 Mar 2025, 04:38
by gordonisnz
FIXED IT

Added $g_form_security_validation=OFF to the config file, reset my password & now turned it back ON

Re: Forgot or Resend password

Posted: 30 Mar 2025, 04:40
by gordonisnz
NOT FIXED.

Now im adding a new category & get the same error

APPLICATION ERROR #2800

Invalid form security token. This could be caused by a session timeout, or accidentally submitting the form twice.

Please use the "Back" button in your web browser to return to the previous page. There you can correct whatever problems were identified in this error or select another action. You can also click an option from the menu bar to go directly to a new section

Do we need to keep the validation thing OFF to use mantis ??

Re: Forgot or Resend password

Posted: 30 Mar 2025, 04:48
by gordonisnz
Cleared all cache for the mantis site & now fixed i think (EDITED)

Re: Forgot or Resend password

Posted: 31 Mar 2025, 08:10
by dregad
$g_form_security_validation=OFF
Note that this is not recommended, for security reason (you'll be exposed to cross-site request forgery attacks).

The error you're seeing is due to the PHP session becoming invalid. There can be many reasons for that.

You can manually reset the password in the database with an SQL update statement, after computing the MD5 of the password