Facebook Callback bug

[jdmfarms]

Hello.

Great login platform; thank you for providing it. I studied it the other day and downloaded it yesterday. been configing it. I just got FB app connected and discovered a bug on the callback. Found a solution on overstack due to not finding it here in the forum.

Error
Facebook SDK returned an error:
Cross-site request forgery validation failed.
The "state" param from the URL and session do not match.

Fix:
insert this code after $helper = $fb->getRedirectLoginHelper(); --Line 23 on fb-callback.php

Code:

$_SESSION['FBRLH_state']=$_GET['state'];

Reference
https://stackoverflow.com/questions/3202...-failed-th

[mudmin]

Thanks for this! This will go in our next patch!

[mudmin]

Sorry. I missed this, but I have it in 4.3 and will probably roll it backwards to 4.2.11