Invalid Request and other issues after updating to 3.4.3

[steveb]

Script URL: https://www.roeshelp.com/hesk
Version of script: 3.4.3
Hosting company: HostPapa
URL of phpinfo.php:
URL of session_test.php:

HESK version
3.4.3
HESK is up to date
PHP version
7.2.34 (MySQLi)
MySQL version
5.7.43
/hesk_settings.inc.php
Exists, Writable
/attachments
Exists, Writable
/cache
Exists, Writable

What terms did you try when SEARCHING for a solution: invalid request, knowledgebase, Google searches

Write your message below:

Since updating to 3.4.3, working in the Knowledgebase to move an article up or down, delete an article or to save an edit to an article throw an error:

Error
Invalid request

with a Go Back button. Nothing seems to list as an error in the Chrome console, just warnings/alerts.

Also, trying to access the Team area prompts for password however once entered brings you simply to the existing ticket list, so we cannot manage users. If I go into my own profile when logged in, trying to update the profile also throws the Invalid request error. Alerts in Chrome console when I try that are:

DevTools failed to load source map: Could not load content for http://roeshelp.com/hesk/js/selectize.min.js.map: HTTP error: status code 404, net::ERR_HTTP_RESPONSE_CODE_FAILURE
DevTools failed to load source map: Could not load content for chrome-extension://fheoggkfdfchfphceeifdbepaooicaho/sourceMap/chrome/scripts/iframe_form_check.js.map: System error: net::ERR_BLOCKED_BY_CLIENT

[Klemen]

This could be session-related errors; upload the session test files from here:
viewtopic.php?f=13&t=138

Additionally, access the help desk using SSL (https) rather than http. Make sure the "Help desk URL" in Settings > General uses the https version. Force SSL should also be on in Settings > Help desk.

Also, make sure you disable any server-side code caching on the server for Hesk.

.map file errors can be ignored, it's just browser checking if JS map files exist for compressed Javascript. iframe_form_check is not used by Hesk, maybe by an extension.

[steveb]

Thank you - the Force SSL seems to have solved all the problems - manage users works as does edits in the knowledgebase.