Forums Bug Reports Thread

Learn: editing a role fails with "Invalid or missing security token"

Patrick Bass · Jun 6 · 19 · 1 Locked
[Major] [High Priority] [Bug Fixed] [Always Reproduces]
🚀 OP Jun 6, 2026 4:38pm

Where. /admin/learn/roles/1 (and other Learn role pages)

What happens. Invalid or missing security token. Please refresh and try again.

Likely cause. CSRF token missing or invalid on the Learn role form.

Related. Same error on /admin/learn/courses/new and /admin/learn/scorm/new — probably one shared fix in the Learn admin CSRF layer.

Status: verified, reproducible (always). Open — not yet actioned.


Patrick Bass
@mobieus

🚀 Jun 7, 2026 10:01am

Resolved and deployed to production. Commit 0753b320f6.

Same root cause as #188 — roles/index.php used the wrong session key and field name. Fixed in the same CSRF sweep. Learn role editing now works.

Status: fixed. Thread closed.


Patrick Bass
@mobieus

Log in or register to reply to this thread.