# 403 Access Forbidden by CSRFProtector! #323

**URL:** https://discourse.opendocman.com/t/403-access-forbidden-by-csrfprotector-323/81
**Category:** Community Support
**Created:** [July 12, 2021, 5:32am UTC](https://discourse.opendocman.com/t/403-access-forbidden-by-csrfprotector-323/81 "2021-07-12T05:32:02Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![BCT](https://discourse.opendocman.com/letter_avatar_proxy/v4/letter/b/6a8cbe/32.png) [@BCT](https://discourse.opendocman.com/u/BCT)
#### Post date: [July 12, 2021, 5:32am UTC](https://discourse.opendocman.com/t/403-access-forbidden-by-csrfprotector-323/81/1 "2021-07-12T05:32:02Z")

</div>

Hello,  
I did install & configure **OpenDocMan V. 1.4.4** in a sub folder in Centos 7 (Linux) remote server. Then I changed the favicon.ico & logo.gif images of the application. The new logo is displayed successfully, but the new favicon is not displayed.

Now the main issue is when I try to login to the application as the admin user, I receive the following error,

**403 Access Forbidden by CSRFProtector!**

**The server details are:**

Web Server: Apache/2.4.6 (CentOS)  
PHP Version: 5.6  
Database Server version: 5.5.68-MariaDB - MariaDB Server

**SELINUX Status:**  
Disabled

I have given write permission to apache to the relevant document directories.  
Please help me to resolve this issue,  
Thanks,

---

<div class="post-metadata">

### Author: ![jorgecarousel](https://discourse.opendocman.com/letter_avatar_proxy/v4/letter/j/97f17d/32.png) [@jorgecarousel](https://discourse.opendocman.com/u/jorgecarousel)
#### Post date: [April 25, 2022, 5:17pm UTC](https://discourse.opendocman.com/t/403-access-forbidden-by-csrfprotector-323/81/2 "2022-04-25T17:17:43Z")

</div>

I have the same problem with a brand new installation of version 1.4.4 on a Windows machine with Apache, PHP 7.4 and MySQL 8, when I try to login by just going to [https://www.example.com/opendocman](https://www.example.com/opendocman) it shows me that error, but if I login going to [https://www.example.com/opendocman/out.php](https://www.example.com/opendocman/out.php) it does let me in, what seems to be the problem?
