1

Magento 1.9.2.3 login problem in admin pannel in google chrome Invalid Form Key. Please refresh the page how to slove this problem

7ochem
  • 7,532
  • 14
  • 51
  • 80
Ishvar Patel
  • 49
  • 1
  • 9

5 Answers5

2

I had the exact same problem earlier:

  • Clear your browser cookies
  • Delete the content of var/session folder

That fixes the issue.

Raphael at Digital Pianism
  • 70,385
  • 34
  • 188
  • 352
  • 1
    I had the same problem after switching to CGI. Delete the browser cache and cookies and it was working. – René Höhle Jan 23 '16 at 12:12
  • Deleting var/session is never an appropiate solution. http://magento.stackexchange.com/questions/94589/keeping-customers-logged-in-after-deleting-var-session – Fabian Schmengler Sep 14 '16 at 11:05
1

try using 127.0.0.1 when you set up magento in localhost. I have also encounter same problem, that's the solution a have made and it works fine.

Hitesh Vaghasiya
  • 609
  • 2
  • 7
  • 20
0

This is most likely related to the recent Security Patch SUPEE-7405.

In most cases, the following will resolve the issue:

  • Clear your browser cookies
  • Delete the content of var/session folder

If the issue persists, check if you have a local version of Mage_Core_Model_Session in this path app/code/local/Mage/Core/Model/Session.php

If you do, you will need to update/migrate your local version to align with the new version of this file (app/code/core/Mage/Core/Model/Session.php)

If the issue persists, check whether anything in your project (e.g. your local code and any extensions you may use) overloads / extends the Mage_Core_Model_Session class. If so, check if those extensions have any compatibility related updates you need to apply, and if not you may need to check yourself whether they introduce any breaking changes with the new Mage_Core_Model_Session class.

7ochem
  • 7,532
  • 14
  • 51
  • 80
James Martin
  • 109
  • 2
  • Deleting var/session is never an appropiate solution. http://magento.stackexchange.com/questions/94589/keeping-customers-logged-in-after-deleting-var-session – Fabian Schmengler Sep 14 '16 at 11:21
0

It is a known issue of the last patch SUPEE-7405 included in Magento 1.9.2.3 release.
Please see this post to check issues : https://magento.stackexchange.com/a/98236/33619

Matthéo Geoffray
  • 2,684
  • 2
  • 20
  • 45
0

Also you might want to

  • check your cookie-domain settings (base_url = local.whatever.com -> cookie_domain .local.whatever.com or .whatever.com)
  • make sure you have ssl installed if you use 'use secure url in backend'-setting. if you have a non-https-domain entered in secure_url, do not enable 'use secure url in backend/frontend'-setting, it keeps cookies from http-access
mybinaryromance
  • 151
  • 1
  • 11