Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

unitedworx's avatar

How to get more info on TokenMismatchException log entries?

I see a few TokenMismatchException entries in my logs every day however I have no idea on the route these occurred or if its a logged in user with their session expired or a robot failing to maliciously submit a form automatically.

How do I get more insight on these? how do you guys handle these? Do you assume that its csrf doing its job to protect?

0 likes
2 replies
tisuchi's avatar

May be you can play with Illuminate\Foundation\Http\Middleware\VerifyCsrfToken.php file.

Please or to participate in this conversation.