Magento 2.3本地创建客户时提示“Invalid Form Key. Please refresh the page.”错误求助

Hey there, let's tackle that "Invalid Form Key. Please refresh the page." error you're hitting when trying to register a customer on your local Magento 2.3 (Luma theme, PHP7.2, XAMPP/Windows) setup. I've run into this exact issue multiple times in local environments, so here are the most reliable fixes to work through:

Local environments often trip up Magento's cookie/session matching.

• Open app/etc/env.php and locate the session configuration block. Make sure cookie_domain matches your local access URL (e.g., localhost if you're using http://localhost/magento2, or leave it empty if you're using a custom local domain). Also set cookie_secure to false since you're using HTTP locally:

  'session' => [
      'save' => 'files',
      'cookie_domain' => 'localhost',
      'cookie_path' => '/',
      'cookie_httponly' => true,
      'cookie_secure' => false,
  ],
  

• Clear your browser's cache and cookies completely, then restart the browser before retrying the registration.

Stale cache is one of the top culprits for form key mismatches. Run these commands from your Magento root directory (use XAMPP's Shell or Git Bash for Windows):

php bin/magento cache:clean
php bin/magento cache:flush
php bin/magento setup:static-content:deploy -f
php bin/magento setup:di:compile

You can also manually delete the contents of these folders to be thorough:

• var/cache/
• var/page_cache/
• var/generation/
• var/view_preprocessed/

Sometimes customizations (even minor ones to Luma) can accidentally remove the form key code.

• Check the core registration template at vendor/magento/module-customer/view/frontend/templates/form/register.phtml and confirm this line exists:

  <?= $block->getBlockHtml('formkey') ?>
  

• If you're using a Luma child theme and overrode this template, double-check that you didn't omit the line. Add it back if missing, then re-run the static content deploy command from Fix 2.

Windows/XAMPP sometimes has issues with PHP session storage permissions:

• Open your XAMPP php.ini file (located in xampp/php/php.ini).
• Find the session.save_path directive and ensure it points to a valid, writable folder (e.g., C:\xampp\tmp).
• Confirm the folder exists and that the Apache service has read/write access to it. Restart Apache after making changes.

Privacy or ad-blocking extensions (like uBlock Origin, Privacy Badger) can block Magento's cookies or interfere with form key generation. Disable all browser extensions, refresh the registration page, and try submitting again.

Make sure the URL you use to access your site is identical to what's set in Magento's admin:

• If your admin Base URL is http://localhost/magento2, don't use http://127.0.0.1/magento2 to browse. Cookie domain mismatches will break form key validation.

内容的提问来源于stack exchange，提问作者raj tiwari