Features / Usability

> The CSRF message shouldn't have anything to do with how the links in your page are written, as far as I know. It's to guard against malicious cross-site scripting attacks, i.e., to make sure you are a human editor an not an evil script. Anyway, what happens if you just click "confirm" to save the page when it contains the links as you first wrote them? Is the page edit saved OK? I get these messages sometimes and just click to confirm and go on. I haven't really paid attention to whether the message occurance is related to the page content.
>
> — Gary - zukakakina.com

Hi Gary,

I just experienced this the past few days, starting the day before I reported it here. It is on and off. When I confirm, most of the time it goes through. There were a few times I got the error messages. It seems to be specific for one of the tikiwiki sites I initiated recently. (see note below)

This may be how I checked the CSRF options. But, once it is checked, the appearance of the note is on or off. Note: I have not specified the group. Can this feature be checked, let's say for registered user, and not Admin's? What are the pros and cons for doing just that, i.e., specifying the group to which CSRF applies?

Thanks.

cgc0202

Note: [I have been installing several tikis because I do not know how to install the "multi-tiki" yet — the instructions of mose for Multitiki1.9.1 is very confusing to me. Several people here have asked for clarifications and the responders keep on pointing to mose's instructions. Also, the multitiki tutorial by mose seems to be for installation if you own the server. My websites are in a shared server environment.]