# שגיאה לא ידועה "BAD CSRF"

**URL:** https://meta.discourse.org/t/unknow-error-bad-csrf/260104
**Category:** Support
**Created:** [31 במרץ,‏ 2023,‏ 1:03pm UTC](https://meta.discourse.org/t/unknow-error-bad-csrf/260104 "2023-03-31T13:03:54Z")
**Posts on this page:** 1
**Showing post:** 3

<div class="post-metadata">

### Author: ![southpaw](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/southpaw/32/79352_2.png) [@southpaw](https://meta.discourse.org/u/southpaw)
#### Post date: [5 באפריל,‏ 2023,‏ 2:24pm UTC](https://meta.discourse.org/t/unknow-error-bad-csrf/260104/3 "2023-04-05T14:24:56Z")

</div>

Hi @micoHuang,

I’m sorry to see no one has any suggestions for you. I don’t have a solution, but I wanted to be sure you had seen this topic: [Troubleshooting "BAD CSRF" error on initial site setup?](https://meta.discourse.org/t/troubleshooting-bad-csrf-error-on-initial-site-setup/97059).  
It’s not identical to your situation, but there may be something there that gives you some help.

> [@micoHuang](#):
>
> currently I cannot cancel “force https” on the page

The topic I linked above has [a reply](https://meta.discourse.org/t/troubleshooting-bad-csrf-error-on-initial-site-setup/97059/13) that describes how to _enable_ force https… I’m _wondering_ if using those instructions with `false` instead of `true` might allow you to disable it? (Note: Please wait to see if anyone chimes in before you try that. 😬)

---

_[View the full topic](https://meta.discourse.org/t/unknow-error-bad-csrf/260104)._