vb.org Archive - Security token with external search field.

Page 3 of 4

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vB3 Programming Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=15)

- - Security token with external search field. (https://vborg.vbsupport.ru/showthread.php?t=203057)

theybannedme

04-27-2009 04:43 PM

Yes, it has a security token in the source code but it says invalid:

Code:

var SESSIONURL = "";

var SECURITYTOKEN = "1240854144-f86c4260645d2[remainder deleted for security reasons]";

var IMGDIR_MISC = "lunablack/misc";

var vb_disable_ajax = parseInt("0", 10);

Dismounted

04-28-2009 07:12 AM

I'm talking about the hidden input...

Code:

<input type="hidden" name="securitytoken" value="SOMETHINGHERE" />

theybannedme

04-30-2009 02:59 PM

This is on the search page:

Code:

<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />

This is on the results (invalid security token) page:

Code:

var SECURITYTOKEN = "LONG STRING OF NUMBERS/LETTERS";

Lynne

04-30-2009 03:20 PM

Your input field is not correct - the echo statement is wrong. You'll need to play with it... perhaps ". $bbuserinfo['var'] ." ?

theybannedme

05-01-2009 02:49 AM

Quote:

Originally Posted by Lynne (Post 1801874)

Your input field is not correct - the echo statement is wrong. You'll need to play with it... perhaps ". $bbuserinfo['var'] ." ?

Thanks for your suggestion. I tried it but am getting an identical result. Perhaps this cannot be done?

Dismounted

05-01-2009 05:31 AM

Why are you reading the "var SECURITYTOKEN = " bit? That is the vBulletin Javascript, not your input - you need to look at the input's code in the source...

theybannedme

05-02-2009 10:31 PM

Quote:

Originally Posted by Dismounted (Post 1802325)

Why are you reading the "var SECURITYTOKEN = " bit? That is the vBulletin Javascript, not your input - you need to look at the input's code in the source...

I'm sorry, I'm techtarded and I don't understand. :(

Dismounted

05-03-2009 04:46 AM

When you've loaded up the page in your browser, view the source, and find this line:

Code:

<input type="hidden" name="securitytoken" value="

theybannedme

05-17-2009 04:19 AM

Quote:

Originally Posted by Dismounted (Post 1803400)

When you've loaded up the page in your browser, view the source, and find this line:

Code:

<input type="hidden" name="securitytoken" value="

This is what I have, which is what I coded in. So confused, I feel like I'm just going in circles.

Code:

<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />

NetRover

06-03-2009 11:08 AM

Quote:

Originally Posted by theybannedme (Post 1812230)

This is what I have, which is what I coded in. So confused, I feel like I'm just going in circles.

Code:

<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />

Hi there, I'm far from an expert and this thread has just resolved my problem creating my own search.

Are you sure you need the full server path to your global.php?

Mine is fine copying the example exactly and using:

Code:

<?php

require_once('./global.php');



?>

My custom search file is within the forum root folder though.

All times are GMT. The time now is 03:10 PM.

Page 3 of 4

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01087 seconds Memory Usage 1,739KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (9)bbcode_code_printable (4)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (3)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: