Access denied. Invalid request.

  • Resolved Reiner Gruhle

    (@reinergruhle)


    3 weeks, 2 days ago

    Hello,

    since the automatic update of Advanced File Manager from version 5.4.12 to 5.4.13, write operations in the frontend file manager no longer work on our WordPress site.

    The file manager itself loads correctly. Users can access their assigned personal directories and read permissions are working as expected. The directories also have the correct filesystem permissions.

    However, any attempt to perform a write operation, for example creating a new folder, fails with the following message:

    Access denied.
    Invalid request. Please reload.

    I can reproduce the issue with different WordPress users and different personal directories, so it does not appear to be related to a specific user or directory.

    The AJAX request for creating a directory is sent correctly, for example with:

    cmd=mkdir
    name=Neuer Ordner
    target=l1_Lw

    The server responds with:

    {
    “error”: [
    “errPerm”,
    “Invalid request. Please reload.”
    ],
    “csrfReload”: true
    }

    The initial request to the file manager works correctly and reports the root directory with:

    read: 1
    write: 1
    isroot: 1

    The problem appeared immediately after the automatic update from Advanced File Manager 5.4.12 to 5.4.13 on August 14, 2026. The setup and directory permissions had not been changed.

    This looks like a possible regression in version 5.4.13, potentially related to the CSRF/security handling of write requests.

    Could you please check whether this is a known issue with version 5.4.13?

    Thank you.

    Best regards,
    Reiner

Viewing 12 replies - 1 through 12 (of 12 total)
  • Plugin Support mubashirbutt

    (@mubashirbutt)

    3 weeks, 1 day ago

    Hello @reinergruhle ,

    Thank you for the detailed report and for providing the relevant AJAX response. We apologize for the inconvenience caused following the update.

    We have tested the reported behavior on our end but have not been able to reproduce the issue so far. To help us investigate this further, could you please provide the following details?

    • WordPress version
    • PHP version
    • A short screen recording demonstrating the issue, including the steps taken to create a new folder and the resulting error.

    The recording will help us better understand the exact workflow and identify whether there is anything specific to your environment contributing to the issue.

    Thank you for your cooperation. We look forward to reviewing the additional information and investigating this further.

    Thread Starter Reiner Gruhle

    (@reinergruhle)

    3 weeks, 1 day ago

    Hello @mubashirbutt,

    thank you for looking into this

    Here are the requested details:

    • WordPress: 7.0.3
    • PHP: 8.3.33
    • Advanced File Manager: 5.4.13

    I have also recorded a short video showing the issue. It demonstrates opening the personal file manager, attempting to create a new folder, and the resulting “Access denied – Invalid request. Please reload.” error.

    The issue is reproducible with different WordPress users and appeared after the automatic update from Advanced File Manager 5.4.12 to 5.4.13.

    Please find the screen recording here.

    Best regards,
    Reiner

    Plugin Support mubashirbutt

    (@mubashirbutt)

    3 weeks, 1 day ago

    Hi @reinergruhle ,

    Thanks for sharing the details. I’ll have our technical team take a look and I’ll update you as soon as I get any feedback from them

    Thanks

    Plugin Support mubashirbutt

    (@mubashirbutt)

    3 weeks ago

    Hi @reinergruhle ,

    The issue has been fixed. Kindly install the updated beta plugin from here and let us know if you still face the issue.

    We’ll be waiting for your feedback

    Thank You

    Thread Starter Reiner Gruhle

    (@reinergruhle)

    3 weeks ago

    Hi @mubashirbutt ,

    I downloaded the linked file but it seems to be Version 5.4.13.

    Thus, the issue still exists.

    Regards

    Reiner

    Plugin Support mubashirbutt

    (@mubashirbutt)

    3 weeks ago

    Hi @reinergruhle ,

    Apologies for the inconvenience. We’ll take a look into this and get back to you with an update.

    Thank you for your patience.

    Plugin Support mubashirbutt

    (@mubashirbutt)

    3 weeks ago

    Hi @reinergruhle ,

    Kindly remove the old built and replace it with this beta plugin.

    Feel free to reach out if you still face any issue.

    Thanks

    Thread Starter Reiner Gruhle

    (@reinergruhle)

    2 weeks, 6 days ago

    Hi @mubashirbutt,

    unfortunately, I’m still facing the issue.

    Meanwhile, I was able to narrow it down: The issue only occurs in the frontend. In the backend, Advanced File Manager works fine.

    Please note that the WordPress version has meanwhile been updated to 7.0.4.

    Regards,
    Reiner

    Thread Starter Reiner Gruhle

    (@reinergruhle)

    2 weeks, 6 days ago

    Hi @mubashirbutt,

    I did some further testing and found some additional information that might help to narrow down the issue.

    The problem is reproducible in different browsers. I have now tested it with Vivaldi as well, with the same result.

    When trying to create a new folder in the frontend, the AJAX request to

    /wp-admin/admin-ajax.php?action=fma_render_secure_auth

    with cmd=mkdir returns:

    403 (Forbidden)

    The console then shows:

    elfinder debug: [error] [fma_ui_VSxSaBMVoH8xNgZik]
Zugriff verweigert.
Invalid request. Please reload.

    The relevant request contains, among other parameters:

    cmd=mkdir
name=Neuer%20Ordner%201
target=l1_Lw

    As mentioned before, Advanced File Manager works correctly in the WordPress backend. The 403 error occurs only when performing write operations through the frontend file manager.

    So at this point the issue appears to be specifically related to the frontend fma_render_secure_auth request and is not browser-specific.

    I hope this additional information helps with the investigation.

    Regards,
    Reiner

    Plugin Support mubashirbutt

    (@mubashirbutt)

    2 weeks, 6 days ago

    Hello @reinergruhle ,

    We attempted to replicate the issue using the build we provided, but unfortunately, we were unable to reproduce the same behavior on our end.

    For reference, you can review the video of our testing here:

    View the testing video

    Could you kindly create a support ticket through the link below so our team can take a closer look at the issue and investigate it further?

    Create a support ticket

    Thank you for your cooperation.

    Thread Starter Reiner Gruhle

    (@reinergruhle)

    2 weeks, 5 days ago

    Hi @mubashirbutt

    Yes, as written above: The issue only occurs in the frontend. In the backend, Advanced File Manager works fine.

    Ticket created.

    Regards

    Reiner

    Plugin Support mubashirbutt

    (@mubashirbutt)

    2 weeks, 3 days ago

    Hello @reinergruhle ,

    Since the issue has been resolved. I’ll close this topic, feel free to reach us if any assistance is required.

    If you have a moment, we’d really appreciate it if you could leave us a review on here. Your feedback helps us a lot!

    Thank You

Viewing 12 replies - 1 through 12 (of 12 total)

You must be logged in to reply to this topic.