Search code examples
joomla3.9

The security token did not match. The request was aborted to prevent any security breach. Please try again

I've got the error above in my Joomla website when I either try to log in or create a new account from the side site. I have also noticed the two following things:

  1. if I create a new user from the backend, this doesn't appear in the _users table;
  2. a file named ".myjoomla.configuration.php.md5", containing an alphanumeric string, is automatically generated in the website root every time I try to log in vainly from the frontend. Besides, it turns up again if I remove it manually through FTP.

Did my website get hacked? How could I fix it?

Solution

  • The issue I've encountered was about the Joomla native Login module. As I published it in all the pages of my website and clicked on the login link appeared on the frontend side, I was redirected to a link that looked like 

    mysite.com/index.php/component/users/?view=login&Itemid=yourid

    which displayed the login page correctly. Yet, once filled in the form and submitted it, the warning message in question popped out. The same problem occurred when either trying to register a new account or reset the password. Although I couldn't find an explanation to the issue, I managed to fix it by creating a Login, Reset and Registration menu items under the main menu and then hidden them as I didn't want them to show up among the other menu items on the frontend. Went back to the frontend and clicked on login, I was now redirected to a different url that looks like

    mysite.com/login

    where "login" is the alias that I had chosen for the Login menu item. After having filled in the form and submitted it, I was able to log in successfully. Likewise, Registration and Reset operations worked.