CSRF attack recognized

hi all,

I just installed iddeIM 1.6 on a J1.5.10 session with CB 1.2 stable 1.0 and am getting the following error when attempting to send a pm:

CSRF attack recognized

could somebody pls explain to me what it is about? and what I need to do to get it sorted?

email message attempted to send: "test message "

Check the admin backend, system tab.
By default it is off, so why have you enabled it?

well... ummm... because it says 'Usually this should be enabled.'

got it to work now . thank you!

slabbi wrote:

Check the admin backend, system tab.
By default it is off, so why have you enabled it?

The system tab says:
CSRF protection -- This protects all forms against Cross-Site Request Forgery attacks. Usually this should be enabled. Only when you have strange problems switch it off.

...and he has "strange problems", hasn't he?

It works on most systems fine. Sometimes other components/templates change the session, so the protection does not work on these systems. Also using the back button on the compose page will raise this message.

Is that message a strange problem?

Sounds like a pretty standard error message to me.