# Probleme du Token CSRF expiré

**URL:** <https://www.dolibarr.org/forum/t/probleme-du-token-csrf-expire/22938>\
**Category:** Installing my Dolibarr\
**Created:** [October 18, 2022, 2:06pm UTC](https://www.dolibarr.org/forum/t/probleme-du-token-csrf-expire/22938 "2022-10-18T14:06:47Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![ckamdem](https://www.dolibarr.org/forum/user_avatar/www.dolibarr.org/ckamdem/32/5643_2.png) [@ckamdem](https://www.dolibarr.org/forum/u/ckamdem)\
**Post date:** [October 18, 2022, 2:06pm UTC](https://www.dolibarr.org/forum/t/probleme-du-token-csrf-expire/22938/1 "2022-10-18T14:06:47Z")

</div>

![Screenshot from 2022-10-18 15-03-58](https://www.dolibarr.org/forum/uploads/dolibarrorg/original/2X/1/188c489f02a162a34706959c7b9fd4961eef6d00.png)

I just put Dolibarr 16 on a VPS hosted at OVH.  
As you can see on the picture, I have the message of the expired token when I try to do a logging

---

<div class="post-metadata">

**Author:** ![ksar](https://www.dolibarr.org/forum/user_avatar/www.dolibarr.org/ksar/32/514_2.png) [@ksar](https://www.dolibarr.org/forum/u/ksar)\
**Post date:** [October 18, 2022, 2:51pm UTC](https://www.dolibarr.org/forum/t/probleme-du-token-csrf-expire/22938/2 "2022-10-18T14:51:31Z")

</div>

Hello,

You are on the English forum.  
For french, please go there : [Forum Dolibarr france](https://www.dolibarr.fr/forum/latest)

Most probably you have an external module that creates the issue

---

<div class="post-metadata">

**Author:** ![ckamdem](https://www.dolibarr.org/forum/user_avatar/www.dolibarr.org/ckamdem/32/5643_2.png) [@ckamdem](https://www.dolibarr.org/forum/u/ckamdem)\
**Post date:** [October 18, 2022, 4:56pm UTC](https://www.dolibarr.org/forum/t/probleme-du-token-csrf-expire/22938/3 "2022-10-18T16:56:46Z")

</div>

I re-writted in english

---

<div class="post-metadata">

**Author:** ![ckamdem](https://www.dolibarr.org/forum/user_avatar/www.dolibarr.org/ckamdem/32/5643_2.png) [@ckamdem](https://www.dolibarr.org/forum/u/ckamdem)\
**Post date:** [October 19, 2022, 9:10am UTC](https://www.dolibarr.org/forum/t/probleme-du-token-csrf-expire/22938/4 "2022-10-19T09:10:31Z")

</div>

@ksar Any solution about the issue?

---

<div class="post-metadata">

**Author:** ![ksar](https://www.dolibarr.org/forum/user_avatar/www.dolibarr.org/ksar/32/514_2.png) [@ksar](https://www.dolibarr.org/forum/u/ksar)\
**Post date:** [October 19, 2022, 9:32am UTC](https://www.dolibarr.org/forum/t/probleme-du-token-csrf-expire/22938/5 "2022-10-19T09:32:11Z")

</div>

Hello,  
I have given you the problem :

> [@ksar](#):
>
> Most probably you have an external module that creates the issue

---

<div class="post-metadata">

**Author:** ![ckamdem](https://www.dolibarr.org/forum/user_avatar/www.dolibarr.org/ckamdem/32/5643_2.png) [@ckamdem](https://www.dolibarr.org/forum/u/ckamdem)\
**Post date:** [October 19, 2022, 9:38am UTC](https://www.dolibarr.org/forum/t/probleme-du-token-csrf-expire/22938/6 "2022-10-19T09:38:21Z")

</div>

Is the first installation on this VPS  
How can I detect the module ?

---

<div class="post-metadata">

**Author:** ![ksar](https://www.dolibarr.org/forum/user_avatar/www.dolibarr.org/ksar/32/514_2.png) [@ksar](https://www.dolibarr.org/forum/u/ksar)\
**Post date:** [October 19, 2022, 10:15am UTC](https://www.dolibarr.org/forum/t/probleme-du-token-csrf-expire/22938/7 "2022-10-19T10:15:14Z")

</div>

If it is a fresh install, then I assume that you do not have external module.  
So the other possiblity is that you have issues with PHP\_SESSION.  
Check your server configuration regarding PHP SESSION

---

<div class="post-metadata">

**Author:** ![ckamdem](https://www.dolibarr.org/forum/user_avatar/www.dolibarr.org/ckamdem/32/5643_2.png) [@ckamdem](https://www.dolibarr.org/forum/u/ckamdem)\
**Post date:** [October 19, 2022, 1:51pm UTC](https://www.dolibarr.org/forum/t/probleme-du-token-csrf-expire/22938/8 "2022-10-19T13:51:10Z")

</div>

I reset everything and still the same issue  
Is there a way to disable CRSF security?

---

<div class="post-metadata">

**Author:** ![ckamdem](https://www.dolibarr.org/forum/user_avatar/www.dolibarr.org/ckamdem/32/5643_2.png) [@ckamdem](https://www.dolibarr.org/forum/u/ckamdem)\
**Post date:** [October 22, 2022, 12:20pm UTC](https://www.dolibarr.org/forum/t/probleme-du-token-csrf-expire/22938/9 "2022-10-22T12:20:10Z")

</div>

After several investigations I was able to find out where the problem came from.  
The directory /var/lib/php/sessions is write protected so dolibarr can’t save sessions on it