CSS file can not be imported (missing token in form)

[NicoDucou]

On the page main/admin/settings.php?category=Stylesheets#tabs-3 when validating the form it always shows the message that the token is not validated and the CSS file is never imported.

Since the commit bf50545#diff-3b92311ca8f4223f9e4bd967854e03eba80d6707b77130b9b26706949c92a5b7R1431 when ever a form is validated it should check that the security token is valid. The problem is that in this form for stylesheet upload the token is never validated.

It calls Security::check_token('form', $this);
And in this function I don't know why the form token and the sessionToken are always different so the action is always blocked and the Stylesheet is not imported.

Tested on Chamilo 1.11.x of 2021/09/21

[christianbeeznest]

Hola @NicoDucou puedes confirmar si esta bien ahora porfavor ? Esto es mi PR con el fix 0f3b54f

Gracias.

[ywarnier]

@NicoDucou this one is fixed, right?

[xam1234]

@ywarnier When do you plan to release version 1.11.18 ?

[NicoDucou]

@NicoDucou this one is fixed, right?

Yes

[ywarnier]

@ywarnier When do you plan to release version 1.11.18 ?

When it's ready (soon)

[Chabi01]

Hi,
I'm using the V1.11.16 (softaculous), the error is still here...

[Chabi01]

I get exactly on submit :
Not Found

The requested URL was not found on this server.
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
The url triggered is : /main/admin/admin/settings.php?category=Stylesheets#tabs-3

No error message even on test server mode.

[Chabi01]

2 times "admin" ??
A quick way to correct the wrong file ?

[Chabi01]

For the record, I have solve this by modifying the file mai/admin/settings.lib.php, line 400
from
api_get_path().'admin/settings.php?category=Stylesheets#tabs-3'
to
api_get_path().'settings.php?category=Stylesheets#tabs-3'

But now, i get "not validated". Still searching...

Seems to be the token issue again : quickform.php line 1435...