[lqfb-main] Help to finish a Liquid Feedback installation

[Antonio Pardo]

Hi, we just tried an installation of liquid feedback in Debian stable
with lighttpd and a Varnish frontend.

The bug comes in the english page of log-in and it throws this:

../env/request/set_csrf_secret.lua:15: Cross-Site Request Forgery
attempt detected

Stack trace follows:
[C]: in function 'error'
../env/request/set_csrf_secret.lua:15: in function 'set_csrf_secret'
...id_feedback_frontend/app/main/_filter/20_session.lua:12: in function
'func'
../env/execute/file_path.lua:24: in function 'file_path'
../env/execute/_add_filters_by_path.lua:17: in function 'wrapper_func'
../env/execute/wrapped.lua:21: in function <../env/execute/wrapped.lua:11>
(tail call): ?
../env/execute/multi_wrapped.lua:18: in function 'inner_func'
../env/execute/inner.lua:19: in function 'inner'
..._frontend/app/main/_filter_action/10_transaction.lua:3: in function
'func'
...
../env/execute/wrapped.lua:21: in function <../env/execute/wrapped.lua:11>
(tail call): ?
(tail call): ?
../env/execute/filtered_action.lua:32: in function 'filtered_action'
webmcp.lua:292: in function <webmcp.lua:235>
[C]: in function 'xpcall'
webmcp.lua:234: in main chunk
[C]: in function 'pcall'
/opt/webmcp/cgi-bin/webmcp-wrapper.lua:7: in main chunk
[C]: ?


How can we solve this bug?

Our instance:
http://liquid.tomalaplaza.net/lf/

Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://dev.liquidfeedback.org/pipermail/main/attachments/20120526/9e9923aa/attachment.html>