Forums Bug Reports Thread

Learn: SCORM upload fails with "Invalid or missing security token"

Patrick Bass · Jun 6 · 26 · 1 Locked
[Major] [High Priority] [Bug Fixed] [Always Reproduces]
🚀 OP Jun 6, 2026 4:38pm

Where. /admin/learn/scorm/new

What happens. Invalid or missing security token. Please refresh and try again.

Likely cause. CSRF token missing or invalid on the SCORM upload form.

Related. Same error on /admin/learn/courses/new and /admin/learn/roles/1 — likely one shared root cause in Learn admin CSRF handling.

Status: verified, reproducible (always). Open — not yet actioned.


Patrick Bass
@mobieus

🚀 Jun 7, 2026 10:01am

Resolved and deployed to production. Commit 0753b320f6.

Same root cause as #188 — scorm/new.php used the wrong session key and field name. Fixed in the same CSRF sweep. SCORM upload now works.

Status: fixed. Thread closed.


Patrick Bass
@mobieus

Log in or register to reply to this thread.