Admin Hash Mismatch

[Reven]

Before I upgraded to 3.6.0 I was running 3.5.4, where my article system (coded by me) worked fine. Now when I try to edit articles (which uses a normal form which sends a POST request to articles.php?do=articlesettings), I get the message 'Admin Hash Mismatch'.

Is this to do with changes to the admin page functions such as print_cp_header() and the like, or is it something to do with my vBulletin licence? It seems weird that pages without POST data work fine, but pages I've made with them don't.

[ericgtr]

There have been quite a few changes in 3.6, I'm not sure about POST but I know that gpc has a lot of use in it. Have a look at this and see if it helps any https://vborg.vbsupport.ru/showthread.php?t=95918

[Paul M]

It's a new security feature added to 3.6 - POST requests to files in the admincp area must include a hidden field containing the adminhash, if they don't then they will get bombed out with the above message.

[Reven]

That makes sense, all of the errors I was receiving were after trying to POST. Thanks a lot. Any idea what variable holds the admin hash? Is it the cookie 'cpsession' (with the cookie prefix on front)?

Also, has there been some sort of announcement about all of these changes by vBulletin?