# \[SOLVED\] Impossible to logout **URL:** \ **Category:** Plugins\ **Created:** [December 31, 2024, 6:31pm UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348 "2024-12-31T18:31:37Z")\ **Posts on this page:** 17\ **Page:** 1
**Author:** ![RainerBielefeld](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/rainerbielefeld/32/1076_2.png) [@RainerBielefeld](https://kanboard.discourse.group/u/RainerBielefeld)\ **Post date:** [December 31, 2024, 6:31pm UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348/1 "2024-12-31T18:31:37Z")
In 2 of my 4 KANBOARD installations I can not log out ## STR: 1. Log in to KANBOARD with Plugin “Group\_assign” installed (if not already done) 2. In Profile Image Dropdown (top right area of screen): Click ˋMy Dashboardˊ (but does not matter from where you try) 3. In Profile Image Dropdown (top right area of screen) click last item “Logout” » expected: logout, login page appears actual: Message “Access Forbidden” right from KANBOARD project Icon 😥 and identical message with red background below. This message will disappear after several seconds. ![grafik](https://global.discourse-cdn.com/free1/uploads/kanboard1/original/2X/0/0b4a4cd603ea68b9870ead2603c9a7c9946935e2.png) ## Additional Info: a) I tried with all other Plugins removed from installation. Reason is Plugin “Group\_assign” a1) but in 2 other installations with that plugin installed logout works fine. b) More research: next year 😉 ## My Configuration - Application version: 1.2.43 , installed at hoster [All-Inkl](https://all-inkl.com/) - PHP version: 8.3.14-nmm1 - PHP SAPI: fpm-fcgi - HTTP Client: cURL - OS Version: Linux 6.8.0-51-generic - Database driver: mysql - Datenbank Version: 10.11.8-MariaDB-0ubuntu0.24.04.1-log - Browser: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:117.0a) Gecko/20100101 SeaMonkey/2.53.20B1, Build 20241213223615; Same with FF Trunk 135.0a1 (2024-12-31) (64-Bit), - Profile Language: German - DU - [Plugins](https://kanboard.org/plugins.html): ---
**Author:** ![alfredb](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/alfredb/32/1051_2.png) [@alfredb](https://kanboard.discourse.group/u/alfredb)\ **Post date:** [December 31, 2024, 9:16pm UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348/2 "2024-12-31T21:16:46Z")
Welcome to plugin hell! This we already had earlier, in case you don’t remember. 😉 > [@Kanboard 1.2.41](https://kanboard.discourse.group/t/kanboard-1-2-41/3289/11): > > As a workaround, you can comment out line #61 if the file app/Controller/AuthController.php, and hope that @creecros soon will fix the Customizer plugin. EDIT: In case you cannot or don’t want to wait, you can download and use my patched version of Customizer-1.14.2 from [here](https://cloud.alfredbuehler.ch/index.php/s/tRNrZjcChNp9QrP). This should solve the logout issue, but leaving the CSRF checking intact. Happy new year to everybody! ---
**Author:** ![RainerBielefeld](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/rainerbielefeld/32/1076_2.png) [@RainerBielefeld](https://kanboard.discourse.group/u/RainerBielefeld)\ **Post date:** [January 1, 2025, 7:50am UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348/3 "2025-01-01T07:50:01Z")
Hi Alfred, thx, the comment out trick does the job. The _patched version of Customizer-1.14.2_ does not help for the tested Installation, because reason is plugin _Group\_assign 1.8.2_. I remembered “Kanboard 1.2.41 …”, but only for “Customizer”; and to be honest, I did not test, which of both plugins is the reason for my problem in the other installation. I will test that immediately. ---
**Author:** ![RainerBielefeld](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/rainerbielefeld/32/1076_2.png) [@RainerBielefeld](https://kanboard.discourse.group/u/RainerBielefeld)\ **Post date:** [January 1, 2025, 8:35am UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348/4 "2025-01-01T08:35:20Z")
And for the other KANBOARD installation the patched Customizer-1.14.2 solved the problem. Thx! ---
**Author:** ![alfredb](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/alfredb/32/1051_2.png) [@alfredb](https://kanboard.discourse.group/u/alfredb)\ **Post date:** [January 1, 2025, 11:16am UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348/5 "2025-01-01T11:16:39Z")
> [@RainerBielefeld](#): > > because reason is plugin _Group\_assign 1.8.2_. What’s wrong with Group\_assign? Logout works on my testing instance with both plugins installed. - Customizer 1.14.2 - Group\_assign 1.8.2 ---
**Author:** ![Jean38](https://avatars.discourse-cdn.com/v4/letter/j/f19dbf/32.png) [@Jean38](https://kanboard.discourse.group/u/Jean38)\ **Post date:** [January 4, 2025, 4:57pm UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348/6 "2025-01-04T16:57:54Z")
Commenting worked fine for me, but the patched version did not fix my issue to logout. note : the only other plugin I’m using is Moon, which does not prevent logout when alone. ---
**Author:** ![alfredb](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/alfredb/32/1051_2.png) [@alfredb](https://kanboard.discourse.group/u/alfredb)\ **Post date:** [January 5, 2025, 3:49pm UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348/7 "2025-01-05T15:49:08Z")
I assume, you took the Customizer-1.14.2.zip from the GitHub repo, which indeed doesn’t work, as it doesn’t contain my modifications. If you download and install my patched [Customizer-1.14.2.zip](https://cloud.alfredbuehler.ch/index.php/s/tRNrZjcChNp9QrP), logout will work as expected. Just verified with: - Kanboard 1.2.43 - Customizer 1.14.2 (patched) - Moon 1.4.6 ---
**Author:** ![Jean38](https://avatars.discourse-cdn.com/v4/letter/j/f19dbf/32.png) [@Jean38](https://kanboard.discourse.group/u/Jean38)\ **Post date:** [January 21, 2025, 7:00am UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348/8 "2025-01-21T07:00:03Z")
I was pretty confident that I did use the zip file hosted on Owncloud. I’ll try again before I give my definitive answer 🙂 ---
**Author:** ![Jean38](https://avatars.discourse-cdn.com/v4/letter/j/f19dbf/32.png) [@Jean38](https://kanboard.discourse.group/u/Jean38)\ **Post date:** [January 21, 2025, 8:52am UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348/9 "2025-01-21T08:52:10Z")
Ok my bad, your zip does the job. Thanks! ---
**Author:** ![michael1maass](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/michael1maass/32/1097_2.png) [@michael1maass](https://kanboard.discourse.group/u/michael1maass)\ **Post date:** [January 31, 2025, 8:53am UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348/10 "2025-01-31T08:53:43Z")
Hi, s this just hit me out of the blue… I’d swear, the Logout worked until this week. The effect does not disturb anyone but me on this instance because nobody really logs #out… why should they. I was hit while trying to switch into an admin account to juggle some stuff. I don’t have the Customizer installed, just the group assign. And I’m not sure which Line in which script I would have to comment out… Any new insights ? Michael ---
**Author:** ![alfredb](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/alfredb/32/1051_2.png) [@alfredb](https://kanboard.discourse.group/u/alfredb)\ **Post date:** [January 31, 2025, 11:42am UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348/11 "2025-01-31T11:42:28Z")
> [@michael1maass](#): > > I don’t have the Customizer installed, just the group assign. Really? Isn’t there any other plugin besides Group\_assign? I cannot reproduce this with Kanboard 1.2.43 and Group\_assign 1.8.2. ---
**Author:** ![michael1maass](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/michael1maass/32/1097_2.png) [@michael1maass](https://kanboard.discourse.group/u/michael1maass)\ **Post date:** [January 31, 2025, 4:13pm UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348/12 "2025-01-31T16:13:48Z")
Ahhh you got. me there…… I was fixed on the two mentioned in the thread….sorry for beeing so inspecific and thank you for a really quick reply. We used a less advanced aproach to solve this. What actually happened was, that we upgraded from 1.2.39 to 1.2.43 this Morning. I wasn‘t aware off this, and yes,we need to use a QA System! So we rolled back to 1.2.40 wich Silvester the issue, but not the problem. That is a task for another day. Anybody tried the logs for some additional information yet? Thanks again and a good Weekend With regards Michael ---
**Author:** ![alfredb](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/alfredb/32/1051_2.png) [@alfredb](https://kanboard.discourse.group/u/alfredb)\ **Post date:** [February 1, 2025, 3:42pm UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348/13 "2025-02-01T15:42:13Z")
In Kanboard 1.2.41, the function AuthController::logout was changed: > - fix: add CSRF check to the logout endpoint See the details [here](https://kanboard.discourse.group/t/kanboard-1-2-41/3289). As a consequence, each plugin that overrides the file _Template/header/user\_dropdown.php_ requires to be updated. You could still continue using the latest Kanboard (recommended), if you - update all your affected plugins, where available, or - patch the all your affected plugins by hand, or - apply my proposal below. > [@Kanboard 1.2.41](https://kanboard.discourse.group/t/kanboard-1-2-41/3289/11): > > As a workaround, you can comment out line #61 if the file app/Controller/AuthController.php, and hope that @creecros soon will fix the Customizer plugin. EDIT: In case you cannot or don’t want to wait, you can download and use my patched version of Customizer-1.14.2 from [here](https://cloud.alfredbuehler.ch/index.php/s/tRNrZjcChNp9QrP). This should solve the logout issue, but leaving the CSRF checking intact. ---
**Author:** ![alfredb](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/alfredb/32/1051_2.png) [@alfredb](https://kanboard.discourse.group/u/alfredb)\ **Post date:** [February 1, 2025, 4:03pm UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348/14 "2025-02-01T16:03:48Z")
# Bonus hint To locate affected plugins & lines, you can run this command from your Kanboard directory. ```shell $ find plugins/ -type f -name user_dropdown.php | xargs grep -n AuthController ``` to get affected lines ```plaintext plugins/Group_assign/Template/header/user_dropdown.php:42: url->icon('sign-out', t('Logout'), 'AuthController', 'logout') ?> plugins/Customizer/Template/header/user_dropdown.php:37: url->icon('sign-out', t('Logout'), 'AuthController', 'logout', [], true) ?> ``` As you can see, the _Group\_assign_ plugin isn’t patched, but the _Customizer_ is. ---
**Author:** ![kenh](https://avatars.discourse-cdn.com/v4/letter/k/e9a140/32.png) [@kenh](https://kanboard.discourse.group/u/kenh)\ **Post date:** [February 5, 2026, 4:02pm UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348/15 "2026-02-05T16:02:09Z")
How do I install the patch version on top of the current version? I’m a complete newbie. ---
**Author:** ![alfredb](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/alfredb/32/1051_2.png) [@alfredb](https://kanboard.discourse.group/u/alfredb)\ **Post date:** [February 5, 2026, 5:08pm UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348/16 "2026-02-05T17:08:50Z")
First uninstall the original plugin. Then copy the new zip file to your server’s plugins directory and unzip it there. ---
**Author:** ![kenh](https://avatars.discourse-cdn.com/v4/letter/k/e9a140/32.png) [@kenh](https://kanboard.discourse.group/u/kenh)\ **Post date:** [February 5, 2026, 5:17pm UTC](https://kanboard.discourse.group/t/solved-impossible-to-logout/3348/17 "2026-02-05T17:17:29Z")
Thank you so much @alfredb. That was super helpful.