PDA

View Full Version : Help! Something about security token..


Wazran
08-12-2008, 01:43 AM
My users keep getting the following message, although I don't:

Your submission could not be processed because a security token was missing.

If this occurred unexpectedly, please inform the administrator and describe the action you performed before you received this error.

Any ideas? :/ Just when using basically any feature..

Lynne
08-12-2008, 02:31 AM
Here is an article about the security tokens and how to fix your forms - Implementing CSRF Protection in modifications (https://vborg.vbsupport.ru/showthread.php?t=177013)

Wazran
08-12-2008, 02:39 AM
Thanks,

I'll look into it - although I've tried steps on vb.com; none of them work. I haven't installed any modifications nor have I upgraded my forum recently.

RLShare
08-12-2008, 02:41 AM
Can you post a link to the site?

Wazran
08-12-2008, 02:51 AM
Err, it's sort of a huge mess right now. :D

I don't even have the domain yet - we're in heavy development. There are boards everywhere. If you really need a link tell me and I'll PM you it.

Opserty
08-12-2008, 09:34 AM
Create a New Style with No Parent Style, does this resolve your issue?

Wazran
08-12-2008, 04:10 PM
No, it does not.

PS: I don't get this error, only some of my members do. :S

Opserty
08-12-2008, 04:15 PM
Even with the New Style the error still occurs?

What actions are the users undertaking that are causing the errors?

Lynne
08-12-2008, 04:24 PM
If a new style doesn't fix the issue then it sounds like the issue may be with a modification you are using. Are all your modifications up-to-date? You may need to figure out what action your users are taking to get this error in order to figure out which modification is causing it.

Wazran
08-12-2008, 04:51 PM
I have no modifications installed as of yet. My co-administrator & another user are getting this problem, one is with paid subscriptions and the other with logging in. Other features too, I think. They tried clearing internet cache, everything.

I'll try to login to their accounts and figure out where it is.

Edit: Even when I'm on their account, I don't get the error. It's only some users who get it, I don't know why. :/

Lynne
08-12-2008, 05:09 PM
Installing this modification may help you figure this out - https://vborg.vbsupport.ru/showthread.php?t=177017&highlight=token It may help you figure out what it is that is triggering the notices.

Wazran
08-12-2008, 05:11 PM
Will that work on 3.7x?

Found it out - I'm installing. Thank you.

--------------- Added 1218573996 at 1218573996 ---------------

Isn't sending the message - I made it so it would. It also is being stupid and still not working; I tried everything. It refuses to work - I don't even have any modifications.

--------------- Added 1218574026 at 1218574026 ---------------

I tried again, it's being retarded. :S

Lynne
08-12-2008, 08:05 PM
Have you tried looking in the php error_log?

Wazran
08-12-2008, 08:09 PM
Where is that? and I'm guessing it doesn't send automatically..

--------------- Added 1218578151 at 1218578151 ---------------

I got this:
Missing or Invalid Security Token detected.

Script Call Backtrace
=====================
#0 /home/ultgamen/public_html/forums/includes/functions.php line 2592: eval()
#1 /home/ultgamen/public_html/forums/global.php line 386: fetch_error(security_token_missing,sendmessage.php )
#2 /home/ultgamen/public_html/forums/profile.php line 141: require_once(/home/ultgamen/public_html/forums/global.php)

POST Variables
==============
Array
(
[s] =>
[do] => dst
[securitytoken] =>
[ajax] => 0
)

Request URI
===========
/forums/profile.php?do=dst

Referrer
========
http://ultgame.net/forums/index.php

Any ideas?

Marco van Herwaarden
08-13-2008, 06:39 AM
To troubleshoot this, please remove any hacks and disable your plugins, then see if you still have this problem.
Note: To temporarily disable the plugin system, edit config.php and add this line right under <?php

define('DISABLE_HOOKS', true);

If so, reupload all the original vB non-image files (except install.php). Make sure you upload these in ASCII format and overwrite the ones on the server.

If your problem still exists, please create a new Style with no Parent set. Now browse the forum using this new style, do you still have the same problems? If you are troubleshooting login or guest issues, you will need to set this style as board default in the vBulletin Options.

Wazran
08-13-2008, 01:09 PM
Tried all those, nothing works.

Opserty
08-13-2008, 01:11 PM
What actions are the users undertaking that are causing the errors?

Cloverfield
08-16-2008, 11:06 AM
They are trying to access their UsercP (and sometimes the search feature) and it keeps giving this error. Mainly to normal members. Staff and other ranks don't seem to be affected.

Lynne
08-16-2008, 03:14 PM
Can you create a new user on your site that is a regular registered user and then get this error? If so, go to the page and view the source code and see if the security token is present in the form. (You can compare the same page as a registered user who gets the error with the staff member who doesn't and see what the differences are.)