Body: <p>After I input my credentials, it just stayed on the login page, and did not go to the dashboard. The password is good, we didn't get invalid username and password error.</p>
  
  <p>I opened the trace mode and found this error in the craft.log:</p>
  
  <blockquote>
    <p>Unable to determine if PATH_INFO is enabled on the server: [curl] 60:
    Could it cause the error? </p>
    
    <p>The CSRF token could not be verified</p>
  </blockquote>
  
  <pre><code>2016/12/20 12:52:41 [error] [exception.Craft\HttpException.400] exception 'Craft\HttpException' with message 'The CSRF token could not be verified.' in /var/www/vhosts/xxx.com/master/craft/app/services/HttpRequestService.php:1314 Stack trace:
      #0 /var/www/vhosts/xxx.com/master/craft/app/framework/base/CComponent.php(561): Craft\HttpRequestService-&gt;validateCsrfToken(Object(CEvent))
      #1 /var/www/vhosts/xxx.com/master/craft/app/framework/base/CApplication.php(212): CComponent-&gt;raiseEvent('onBeginRequest', Object(CEvent))
      #2 /var/www/vhosts/xxx.com/master/craft/app/framework/base/CApplication.php(183): CApplication-&gt;onBeginRequest(Object(CEvent))
      #3 /var/www/vhosts/xxx.com/master/craft/app/index.php(62): CApplication-&gt;run()
      #4 /var/www/vhosts/xxx.com/master/public/index.php(20): require_once('/var/www/vhosts...')
      #5 {main} REQUEST_URI=/wtuygyq/upuj/duhuhog
  </code></pre>
  
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2016-12-20T15:26:59.603Z
Comments.Text: Did this happen just once or do you have this problem often. With which browser did this happen and did you try other browsers?
Comments.UserDisplayName: carlcs
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2016-12-20T15:31:20.707Z
Comments.Text: It has been 2 days from IE and chrome. I cleared runtime, restart httpd. Doesn't help.
Comments.UserDisplayName: xyray
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2016-12-20T17:29:06.590Z
Comments.Text: `#5 {main} REQUEST_URI=/wtuygyq/upuj/duhuhog` - is that request uri real, or did you obfuscate it?
Comments.UserDisplayName: Brad Bell
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2016-12-20T19:39:22.090Z
Comments.Text: I did't change REQUEST_URI , I am also wondering what it is? Some decryption issue?
Comments.UserDisplayName: xyray
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2016-12-21T22:07:40.253Z
Comments.Text: I think it's a bot making random posts your site and the real reason you can't log in is somewhere else in your logs.  I'd nuke the log files and try to load in again to get rid of the extra logging noise.
Comments.UserDisplayName: Brad Bell
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2017-01-04T22:15:39.160Z
Comments.Text: @BradBell  I copied production db and code to dev, everything works properly. what's wrong with my prd environment.
Comments.UserDisplayName: xyray
Tags: <admin><csrf><environmentvariables>
Title: Can’t log in to the Craft control panel
ThreadText: # Can’t log in to the Craft control panel
  
  (Asked by: username_0 on 2016-12-20)
  
  After I input my credentials, it just stayed on the login page, and did not go to the dashboard. The password is good, we didn't get invalid username and password error.
  
  I opened the trace mode and found this error in the craft.log:
  
  > Unable to determine if PATH\_INFO is enabled on the server: [curl] 60:
  > Could it cause the error?
  >
  > The CSRF token could not be verified
  
  ```
  2016/12/20 12:52:41 [error] [exception.Craft\HttpException.400] exception 'Craft\HttpException' with message 'The CSRF token could not be verified.' in /var/www/vhosts/xxx.com/master/craft/app/services/HttpRequestService.php:1314 Stack trace:
      #0 /var/www/vhosts/xxx.com/master/craft/app/framework/base/CComponent.php(561): Craft\HttpRequestService->validateCsrfToken(Object(CEvent))
      #1 /var/www/vhosts/xxx.com/master/craft/app/framework/base/CApplication.php(212): CComponent->raiseEvent('onBeginRequest', Object(CEvent))
      #2 /var/www/vhosts/xxx.com/master/craft/app/framework/base/CApplication.php(183): CApplication->onBeginRequest(Object(CEvent))
      #3 /var/www/vhosts/xxx.com/master/craft/app/index.php(62): CApplication->run()
      #4 /var/www/vhosts/xxx.com/master/public/index.php(20): require_once('/var/www/vhosts...')
      #5 {main} REQUEST_URI=/wtuygyq/upuj/duhuhog
  
  ```
  
  **Tags:** admin, csrf, environmentvariables
  
  > **Comments:**
  > **username_1**: Did this happen just once or do you have this problem often. With which browser did this happen and did you try other browsers?  
  > **username_0**: It has been 2 days from IE and chrome. I cleared runtime, restart httpd. Doesn't help.  
  > **username_2**: `#5 {main} REQUEST_URI=/wtuygyq/upuj/duhuhog` - is that request uri real, or did you obfuscate it?  
  > **username_0**: I did't change REQUEST_URI , I am also wondering what it is? Some decryption issue?  
  > **username_2**: I think it's a bot making random posts your site and the real reason you can't log in is somewhere else in your logs.  I'd nuke the log files and try to load in again to get rid of the extra logging noise.  
  > **username_0**: @username_2  I copied production db and code to dev, everything works properly. what's wrong with my prd environment.  
  
  ---
  
  ## 0 answers
  
  