vBCMS Problem with editing a Section

[HM666]

I'm getting this error every time I try to edit a CMS section on a client's site. Please read my entire post, I have tried pretty much everything that is already listed on the site here, so please do not assume my situation is just like the others listed. I have already followed everything that I can in THIS (http://www.vbulletin.com/forum/forum/vbulletin-3-8/vbulletin-3-8-questions-problems-and-troubleshooting/vbulletin-quick-tips-and-customizations/304223-error-security-token-was-missing-or-mismatched?t=296967) thread.

Your submission could not be processed because a security token was missing.

If this occurred unexpectedly, please inform the administrator and describe the action you performed before you received this error.

The Problem:

When I go to edit a section in the CMS I get the above error message. This seems to only happen in a section and not when I try and edit an article. I cannot change things by clicking the little edit pencil in the CMS, but I can change things in the admincp like published, not published etc of the sections. All the permissions are set on the sections so I should be able to edit them within the CMS.

Also this site's forum/cms is in a subdomain. I'm not sure if that will make a difference or not. We are going to be moving it into the main domain once this issue is resolved.

vBulletin & Server Info:

vBulletin Suite 4.2.2 P2
MySQL 5.5.40-cll
PHP 5.4.29
Apache 2.2.27
Perl 5.10.1

There are only 6 hacks installed on the site, if you need a list for what ever reason please let me know.

Things I Have Already Done (in Some Cases More Than Once):

1. Upgraded to the latest version of vBulletin 4.2.2 P2
2. Re-uploaded files overwriting the upgraded files (did this 3 times)
3. Checked files for suspect file versions (Deleted all old vB files, but kept the hacks that are installed)
4. Cleared browser cache 3 times.
5. Checked the site in Firefox, Chrome & IE got the same result in all of them.
6. Created a new skin and tried to make the edits in the new skin after clearing the cache, did not work.
7. Disabled all plugins except the CMS and checked in all 3 browsers after clearing the cache
8. Flushed my Windows 7 DNS cache on my Laptop
9. All add-ons are up to date as I just installed them about 2 weeks ago.

Please help me get this resolved. Thanks.

[ozzy47]

Just a silly question, is there anything in the server error logs?

[kh99]

I almost posted an answer over at vbulletin.com, but decided it wasn't much help. But since you're still looking: when a page POSTs a form, it has to contain a hidden field named securitytoken with a valid value. That message happens when the securitytoken field is missing or blank. But I don't know why it would be blank so this is probably not much help.

[HM666]

Just a silly question, is there anything in the server error logs?

Nope have not looked at them yet. i have a couple of ideas I'm gonna try myself first before I delve into those.

I almost posted an answer over at vbulletin.com, but decided it wasn't much help. But since you're still looking: when a page POSTs a form, it has to contain a hidden field named securitytoken with a valid value. That message happens when the securitytoken field is missing or blank. But I don't know why it would be blank so this is probably not much help.

Yeah I realize the security token has somehow gotten misplaced. i have not edited the skin on a major level and I never remove security tokens within the templates, so I have no idea where its doing this. The one thing i can think of is some of the section within the main sections are not published so I'm gonna go through and publish them all and see if that makes a difference or not.

[ozzy47]

Here is a list of the vBCMS templates that should have the securitytoken in them.

vbcms_article_editor
vbcms_comments_editor
vbcms_comments_page
vbcms_content_article_inline
vbcms_content_article_page
vbcms_content_phpeval_inline
vbcms_content_phpeval_page
vbcms_content_section_inline
vbcms_content_staticpage_inline
vbcms_content_staticpage_page
vbcms_delete_form
vbcms_node_options_form
vbcms_toolbar
vbcms_widgetcontent_editor
vbcms_widget_activitystream_config
vbcms_widget_calendar_config
vbcms_widget_categorynavall_config
vbcms_widget_categorynavbu_config
vbcms_widget_categorynavcurrent_config
vbcms_widget_categorynav_config
vbcms_widget_comments_config
vbcms_widget_execphp_config
vbcms_widget_myfriends_config
vbcms_widget_nav_config
vbcms_widget_poll_config
vbcms_widget_poll_page
vbcms_widget_recentarticle_config
vbcms_widget_recentblogcomments_config
vbcms_widget_recentblog_config
vbcms_widget_recentcmscomments_config
vbcms_widget_recentcontent_config
vbcms_widget_recentposts_config
vbcms_widget_recentthreads_config
vbcms_widget_recent_config
vbcms_widget_rss_config
vbcms_widget_searchwidget_config
vbcms_widget_sectionnavext_config
vbcms_widget_sitecalendar_config
vbcms_widget_static_config
vbcms_widget_tagcloud_config

[HM666]

Here is a list of the vBCMS templates that should have the securitytoken in them.

vbcms_article_editor
vbcms_comments_editor
vbcms_comments_page
vbcms_content_article_inline
vbcms_content_article_page
vbcms_content_phpeval_inline
vbcms_content_phpeval_page
vbcms_content_section_inline
vbcms_content_staticpage_inline
vbcms_content_staticpage_page
vbcms_delete_form
vbcms_node_options_form
vbcms_toolbar
vbcms_widgetcontent_editor
vbcms_widget_activitystream_config
vbcms_widget_calendar_config
vbcms_widget_categorynavall_config
vbcms_widget_categorynavbu_config
vbcms_widget_categorynavcurrent_config
vbcms_widget_categorynav_config
vbcms_widget_comments_config
vbcms_widget_execphp_config
vbcms_widget_myfriends_config
vbcms_widget_nav_config
vbcms_widget_poll_config
vbcms_widget_poll_page
vbcms_widget_recentarticle_config
vbcms_widget_recentblogcomments_config
vbcms_widget_recentblog_config
vbcms_widget_recentcmscomments_config
vbcms_widget_recentcontent_config
vbcms_widget_recentposts_config
vbcms_widget_recentthreads_config
vbcms_widget_recent_config
vbcms_widget_rss_config
vbcms_widget_searchwidget_config
vbcms_widget_sectionnavext_config
vbcms_widget_sitecalendar_config
vbcms_widget_static_config
vbcms_widget_tagcloud_config

ok I'll take a look but I have not changed any of those templates so they should still have it in there. :( Just plain weird.

[ozzy47]

Well is it possible the site owner may have changed the master style at some point?

[kh99]

Yeah I realize the security token has somehow gotten misplaced. i have not edited the skin on a major level and I never remove security tokens within the templates, so I have no idea where its doing this. The one thing i can think of is some of the section within the main sections are not published so I'm gonna go through and publish them all and see if that makes a difference or not.

When you view the html source, do you see hidden field with a blank value, or is it missing completely? You could also temporarily turn on he option to put the template name in html comments and find out which template you should be looking at.

But if you say you haven't edited them then I suppose you'll have the field there with a blank value, which doesn't tell us much about the cause.

[HM666]

Well is it possible the site owner may have changed the master style at some point?

The skin is not a child skin of the master style so it should not have made any difference if they had something changed in it.

When you view the html source, do you see hidden field with a blank value, or is it missing completely? You could also temporarily turn on he option to put the template name in html comments and find out which template you should be looking at.

But if you say you haven't edited them then I suppose you'll have the field there with a blank value, which doesn't tell us much about the cause.

I'll have to look and see.

--------------- Added 1416857033 at 1416857033 ---------------

Checked those templates to no avail. All of them have the security token in them.

[Lynne]

What is your userid? Go to your database and look at the usertextfield table for the row with your userid. Then change the field usertextfield.searchprefs to:
a:1:{s:20:"cmsadmin_showperpage";i:20;}

Then Maintenance > Clear System Cache. You should then be able to edit the section. You set the number of articles (at the bottom of the section page) to a number your server cannot handle. You may be able to increase it from 20 to 50.

[HM666]

What is your userid? Go to your database and look at the usertextfield table for the row with your userid. Then change the field usertextfield.searchprefs to:
a:1:{s:20:"cmsadmin_showperpage";i:20;}

Then Maintenance > Clear System Cache. You should then be able to edit the section. You set the number of articles (at the bottom of the section page) to a number your server cannot handle. You may be able to increase it from 20 to 50.

YAY! I could kiss you but I'll refrain from that. lol :)

[ozzy47]

Well glad this one is finally sorted. :)

[HM666]

Well glad this one is finally sorted. :)

Me too! LOL