View Issue Details

This bug affects 1 person(s).
 8
IDProjectCategoryView StatusLast Update
20242Bug reportsSurvey participants (Tokens)public2025-08-27 10:37
ReporterFreda Assigned Tolajosarpad  
PrioritynoneSeverityblock 
Status closedResolutionfixed 
Summary20242: Token uses are consumed when navigating back in the browser - refreshing browser throws a 403 error
Description

When using token-based surveys, navigating back in the browser consumes token uses left even without completing the survey, it also marks the participant to have completed the survey and records the incomplete response.(see the attached ) LS version 6.15.7

Steps To Reproduce

Steps to reproduce

  • Create a survey that requires tokens.

  • Assign a participant a token with 1 uses allowed.

  • Start the survey with that token.

  • Use the browser’s Back button to navigate back (or browser tabs to return to earlier survey pages).

Expected result

  • Navigating back in the browser should not consume token uses.

  • Token use should not be decremented without a valid final survey submission.

  • Incomplete responses should remain marked as incomplete in the participant table.

  • Reloading should not lock the participant out if allowed uses remain.

Actual result

  • Each navigation back consumes a token use, the participant’s allocated uses are exhausted.

  • The response remains incomplete, but the participant table shows as “Completed”.

  • If the participant reloads the page instead of navigating back, the next submission attempt results in HTTP 403 error(Invalid token).

TagsNo tags attached.
Bug heat8
Complete LimeSurvey version number (& build)
I will donate to the project if issue is resolved
Browser
Database type & version
Server OS (if known)
Webserver software & version (if known)
PHP Version

Users monitoring this issue

There are no users monitoring this issue.

Activities

Freda

Freda

2025-08-26 12:58

developer   ~83320

lajosarpad

lajosarpad

2025-08-26 17:33

developer   ~83324

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=39040

LimeBot

LimeBot

2025-08-26 17:39

administrator   ~83325

Fixed in Release 6.15.9+250826

asshank

asshank

2025-08-27 10:37

reporter   ~83326

Tokenmanagement still broken (major issues) Please, revert back to 6.15.3!!!!
see also https://bugs.limesurvey.org/view.php?id=20241

Related Changesets

LimeSurvey: master 984cbf53

2025-08-26 17:33

lajosarpad

Committer: GitHub


Details Diff
Fixed issue 20242: Fixed the broken token mechanism (04420) Affected Issues
20242
mod - application/helpers/SurveyRuntimeHelper.php Diff File
mod - application/helpers/frontend_helper.php Diff File

Issue History

Date Modified Username Field Change
2025-08-26 12:53 Freda New Issue
2025-08-26 12:58 Freda Note Added: 83320
2025-08-26 12:58 Freda File Added: Screenshot 2025-08-26 at 11.28.10.png
2025-08-26 12:58 Freda File Added: Screenshot 2025-08-26 at 12.28.07.png
2025-08-26 12:58 Freda Bug heat 0 => 2
2025-08-26 17:17 c_schmitz Assigned To => lajosarpad
2025-08-26 17:17 c_schmitz Status new => assigned
2025-08-26 17:33 lajosarpad Changeset attached => LimeSurvey master 984cbf53
2025-08-26 17:33 lajosarpad Note Added: 83324
2025-08-26 17:33 lajosarpad Status assigned => resolved
2025-08-26 17:33 lajosarpad Resolution open => fixed
2025-08-26 17:33 lajosarpad Bug heat 2 => 4
2025-08-26 17:39 LimeBot Note Added: 83325
2025-08-26 17:39 LimeBot Status resolved => closed
2025-08-26 17:39 LimeBot Bug heat 4 => 6
2025-08-27 10:37 asshank Note Added: 83326
2025-08-27 10:37 asshank Bug heat 6 => 8