Thread Tools Problem

[Destined2bGreat]

Whenever I try to use any of the thread tools it goes to a blank error page and says "Could not find phrase 'security_token_missing'." This also happens when attempting to search the thread and when attempting to quick reply.

[Lynne]

This is because of the new security tokens added. You can read about how to fix this in your forms here: Implementing CSRF Protection in modifications (https://vborg.vbsupport.ru/showthread.php?t=177013) You may want to simply revert your templates to get this fixed (or compare yours to the default and then add the code).

[Destined2bGreat]

I added the line of code to probably all of the forms that have anything to do with thread tools and searching but nothing is happening and it still isnt working. Specifically which forms should i add this to?

[Lynne]

Is this from a modification? Perhaps you need to see if a modification form is missing the new line. Take a look in your source code where the error is occuring and see if all the forms have the additional line. If not, find that particular code and add it.

[Destined2bGreat]

I've searched through all my forms which have value="$session[sessionhash]" in it and added the needed line under it and nothing has happened at all. I also couldnt find value="$session[sessionhash]" in the source anyways. How would i go about disabling this feature for the search function and for thread tools?

[Lynne]

I don't know if you can disable Thread Tools. You can disable search in your vboptions, I believe. Did you check your javascript also? Do you have a modification that is present in your Thread Tools?

[Destined2bGreat]

No i checked the java and i have no mods that interfere with searching or thread tools. I ment how would i disable the new security token option for searching and thread tools i read it somewhere but don't know the exact code for it.

[Lynne]

It is probably in that thread I linked to. I have no experience with this yet since I haven't installed 3.6.10 nor update my test site to 3.7 Gold.

[Destined2bGreat]

It's there it is: define('CSRF_SKIP_LIST', 'action_one,action_two'); I just dont know what i would put for the thread tools and search function in place of action one and two.

[Dismounted]

I would focus on fixing the problem instead of leaving it or using a bypass. Please provide a URL to this forum.