Log in

View Full Version : Search Engine Firefox (Security Token) [Problem]


Airon
11-09-2008, 01:00 PM
hello all

i'm having a problema with the security token message:

Your submission could not be processed because a security token was invalid.

If this occurred unexpectedly, please inform the administrator and describe the action you performed before you received this error.

That problem happens with the search engine that i created for firefox. On vbulletin 3.6.8 it worked fine, but now... :(

I tried to put it:

<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />

everywhere, including the .src file

<search
version="7.1"
name="******"
description="******"
sourceTextEncoding="0"
method="POST"
action="http://******/forum/search.php?do=process"
queryCharset="UTF-8"
searchForm="http://******/forum/search.php"
>

<input name="query" user>
<input name="do" value="process">
<input name="quicksearch" value="1">
<input name="s" value="">
<input name="showposts" value="0">
<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />

But it didnt work too, and the original forum search of vbulletin works fine.

Someone knows what can be done to fix it?

Thanks in advance.

Dismounted
11-10-2008, 05:20 AM
Are you referring to a search engine plugin for Firefox? The box where Google search is?

Airon
11-10-2008, 10:16 PM
Are you referring to a search engine plugin for Firefox? The box where Google search is?

Yes, when i use it, shows the security token message :(

Dismounted
11-11-2008, 03:39 AM
Unless you disable CSRF protection on the search page, there is no practical way of solving the issue. By default, the search needs a security token - and that should not be changed.

Airon
11-11-2008, 11:19 PM
And how do i disable CSRF protection on the search page?

Thanks for your help. ^^

Dismounted
11-12-2008, 07:18 AM
It is not recommended - it was put there for a reason, no? But if you really want to, you will be able to find the article regarding CSRF protection in the Articles section.