vb.org Archive - Implementing CSRF Protection in modifications

Page 15 of 18

« First

Last »

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- Programming Articles (https://vborg.vbsupport.ru/forumdisplay.php?f=188)

- - Implementing CSRF Protection in modifications (https://vborg.vbsupport.ru/showthread.php?t=177013)

moon_spell

02-20-2009 09:12 PM

ok . now witch template have to be edited ? would you please tell me ? all templates ?

--------------- Added [DATE]1235223321[/DATE] at [TIME]1235223321[/TIME] ---------------

i did everything but all the users get this message !!!

Your submission could not be processed because a security token was missing.

If this occurred unexpectedly, please inform the administrator and describe the action you performed before you received this error

the latest release of vbulletin ! please help to slove this !

Mr. Baws

02-23-2009 11:14 AM

i get this error only with mozilla when users try to search forums

tlwwolfseye

03-07-2009 06:49 AM

Could you please tell me which of the Templates I have to change so I don´t get the "Securitytoken" error anymore when submitting the Score for the IbProArcade ? If someone would already know, it would save me a lot of work finding that.

Thanks

darkman

03-15-2009 07:16 PM

1 Attachment(s)

Hi, I did the query posted earlier and when I check the Style ID's, one of the results is -1, as shown in the attachment. When I hover over my styles in style manager none of them come up as -1. When I click on a style to go to the url and change the style id at the end of the url to -1 it comes up as the andromeda style, but in style manager, andromeda comes up as styleid 58. Any clues as to why this is like that? I fixed all the security token issues except for the 7 occurences that happen in this -1 styleid.
Any help would be appreciated. :)

Lynne

03-15-2009 08:30 PM

-1 means the Master Style which you can only see in debug mode.

darkman

03-15-2009 08:41 PM

Thank you - how would I change those templates then?

Lynne

03-15-2009 08:48 PM

Quote:

Originally Posted by darkman (Post 1769048)

Thank you - how would I change those templates then?

You would have to go into debug mode. However, it seems odd that those default templates do not have the security token unless you have done something to modify those templates in the Master Style. There are some forms that do not need the securitytoken and my guess is that those don't. (Mine don't have it in those forms (the couple I checked) and the site runs fine.)

darkman

03-15-2009 09:49 PM

ThanQ Lynne - I appreciate your help. I guess I will ignore them for now.
On another note, I'm no longer getting a flood of emails for security tokens missing, but I have received two of these:

HTML Code:

Missing or Invalid Security Token detected.

 

Script Call Backtrace

=====================

#0 /home/imforums/public_html/forums/includes/functions.php line 2688: eval()

#1 /home/imforums/public_html/forums/global.php line 379: fetch_error(security_token_missing,sendmessage.php)

#2 /home/imforums/public_html/forums/profile.php line 150: require_once(/home/imforums/public_html/forums/global.php)

 

POST Variables

==============

Array

(

    [securitytoken] => 

    [ajax] => 0

)

 

Request URI

===========

/forums/profile.php?do=dst

Any ideas?

Lynne

03-15-2009 10:07 PM

Make sure the security token is present in the footer where the profile.php form is called.

darkman

03-16-2009 03:43 AM

Thanks again Lynne, I have about 7 skins total and from what I can see all the footer templates have the security token. The sql query only shows these results. I have received 8 email notificactions of missing security tokens, all with exactly the same information as what I posted above. Any other ideas?

All times are GMT. The time now is 10:18 PM.

Page 15 of 18

« First

Last »

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.10480 seconds Memory Usage 1,736KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)bbcode_html_printable (1)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (1)pagenav_pagelinkrel (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: