Log in

View Full Version : Security token custom memberlist search


NetRover
06-03-2009, 12:29 AM
Hi everyone,

I'm a very basic level and I am hoping I can get some help now I am out of my depth.

I wanted to created my own member list search with lots of profile fields removed so I could still keep my main search page.

I am almost done as I copied the source code html from the main member list search.

I have pasted this code into a html page. I thought everything was working fine as it does for me. I does not however work fine for anyone else as they get a security token error.

My html page working for me only had this
<form action="http://************/memberlist.php?do=getall" method="post">
<input type="hidden" name="s" value="" />
<input type="hidden" name="securitytoken" value="1243980943-7669545ca415e565314d717bb2e4ee96ae05f819" />
<input type="hidden" name="do" value="getall" />



I have now tried this code here but I still get a security token error:
<form action="http://**************/memberlist.php?do=getall" method="post">
<input type="hidden" name="s" value="" />
<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />
<input type="hidden" name="do" value="getall" />

I assume it is something simple and any expert guidance appreciated.

Lynne
06-03-2009, 03:11 AM
This is from the memberlist_search template:
<form action="memberlist.php?do=getall" method="post">
<input type="hidden" name="s" value="$session[sessionhash]" />
<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />
<input type="hidden" name="do" value="getall" />

Is the securitytoken getting populated on the page (check the page source)? Perhaps you removed some needed stuff from your php page? It's very hard to tell what is going on when you've only posted a small bit of the template.

NetRover
06-03-2009, 09:08 AM
Hi Lynne, thank you so much for the reply.

I really appreciate it. There is a lot of code so I'll pm you the link to the html page.

You wont be able to search as it's not for guests but at least you might see what is missing.

Propably loads because I have not put any php into it.

I literally placed the html from the source into a blank html document for the form fields, the header code, the css and the java script from the original search.

thanks again.

--------------- Added 1244031234 at 1244031234 ---------------

This is from the memberlist_search template:
<form action="memberlist.php?do=getall" method="post">
<input type="hidden" name="s" value="$session[sessionhash]" />
<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />
<input type="hidden" name="do" value="getall" />

Is the securitytoken getting populated on the page (check the page source)? Perhaps you removed some needed stuff from your php page? It's very hard to tell what is going on when you've only posted a small bit of the template.

Hi again, I have fixed this now by changing the line in the code for the security token to:
<input type="hidden" name="securitytoken" value="<?php echo $vbulletin->userinfo['securitytoken']; ?>" />

I also changed the file from html to php and then included global.php which I was not doing.

I have one last problem that has occured though in that doing the search I am getting logged out. Anywhere else on my forums even without ticking remember me, I do not ever get logged out.

It works if I tick remember me but I can't expect all my members to do this.

Is there something else I should add to my custom search page to stop users getting logged out?

Lynne
06-03-2009, 03:24 PM
Why is your page html? It should be php, not html. If it's html, it's static and thus it won't fill in any variables for you (like $bbuserinfo[securitytoken]).