I have a soccer project with 14 teams and 26 matchdays. I automatically created the matchdays for both legs. Obviously, the distribution of games does not correspond to my real championship. When trying to change the participants of each game, I receive this message: “The most recent request was denied because it had an invalid security token. Please refresh the page and try again.” and I cannot proceed with the changes
Thank you for reporting this issue. It has been fixed for the upcoming JoomLeague 6.2.0-beta4 release.
The problem was caused by incorrect security-token detection during automatic saving. The script could select another hidden form field with the value 1 instead of the actual Joomla CSRF token. Joomla then correctly rejected the request
as having an invalid security token.
Automatic saving now uses the exact Joomla security token. We have also aligned the schedule-editing permission checks between the user interface and the server endpoint.
After the fix, changing match participants directly in the round match list was verified successfully without any security-token error.
For data-integrity reasons, participants still cannot be changed after a match already contains a result, lineup, event, or statistic. This prevents existing competition data from becoming inconsistent.
The fix will be available in JoomLeague 6.2.0-beta4. After its release, please update the complete JoomLeague package.
I updated my project with the new version, but the problem remains: I can’t change the participants in the rounds that are automatically created when we are assigning league participants.
In your original screenshot, all the displayed matches already have results entered and are marked “Final”. If you are editing these matches, changing their participants is intentionally blocked. Replacing a team could cause an existing result, lineup or statistics to be attributed to a different participant.
The interface should explain this situation and lock the participant selectors. Active selection fields are misleading in this case.
Could you please confirm whether the issue also occurs with newly generated matches that do not yet have any result, lineup, events or statistics? Changing participants must be possible for those matches.
If so, please share a current screenshot and the exact message displayed after attempting the change in Beta 4. The original security-token error and the restriction on matches with existing competition data are two different situations.
JoomLeague and this site are not affiliated with or endorsed by The Joomla! Project™.
Any products and services provided through this site are not supported or warrantied by The Joomla! Project or Open Source Matters, Inc.
Use of the Joomla!® name, symbol, logo and related trademarks is permitted under a limited license granted by Open Source Matters, Inc.
