vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   Programming Articles (https://vborg.vbsupport.ru/forumdisplay.php?f=188)
-   -   Implementing CSRF Protection in modifications (https://vborg.vbsupport.ru/showthread.php?t=177013)

mystic10 08-23-2008 04:35 PM

do i need to do this i just ugraded to 3.7.2 pl2 it should be fixed in that right..as i am still having the problem but only with the thanks hack any help will be appreciated

sunnylikbeckham 09-02-2008 11:31 AM

i m having probs to
does it fixed in 3.7.3??

yotsume 09-04-2008 08:18 AM

I am getting a token error when editing a Blog comment. I use the latest VB Blog. How can I fix the token error here? Also I get a error when I am inside the admin CP and I try and email a user their password?

I had a mod installed called "force useres to read a thread" when I uninstalled that mod I began to see the token errors.

I need these two erros fixed ASAP!

HELP PLEASE!

g00gl3r 09-07-2008 07:35 PM

This is stupid. What the hell is this all about?

--------------- Added [DATE]1220819847[/DATE] at [TIME]1220819847[/TIME] ---------------

Quote:

Originally Posted by sunnylikbeckham (Post 1612722)
i m having probs to
does it fixed in 3.7.3??

Nope.

--------------- Added [DATE]1220820450[/DATE] at [TIME]1220820450[/TIME] ---------------

Quote:

Originally Posted by rinkrat (Post 1500145)
I can't save my vbulletin settings without this error.

What do I change to fix this? In a template?


I also can not import any hacks without an error.

Where do I fix this? In a template?

--------------- Added [DATE]1209251058[/DATE] at [TIME]1209251058[/TIME] ---------------




I am getting the error when I try to edit a template and save it so this will not work.

O.M.F.G. There must be 400 templates showing when I search for that.

dirtyfeast 09-08-2008 05:35 AM

I just installed the latest version of vBulletin, have no mods installed, made a test thread, and I cant delete it. I get this security token error. Contact admin it says. Why does this happen on a newly installed forum with no hacks installed. Could it be the template I am using which is ambience.

mystic10 09-08-2008 10:09 AM

i have the problem with thank you hack..any time someone clicks on thanks they get a security token warning....

i looked throudh the plugin this is where i saw the word securitytoken...what changes do i need to make

<template name="post_thanks_button" templatetype="template" date="1217138974" username="Abe" version="7.7"><![CDATA[<a href="post_thanks.php?$session[sessionurl]do=post_thanks_add&amp;p=$post[postid]&amp;&securitytoken=$bbuserinfo[securitytoken]" id="post_thanks_button_$post[postid]"<if condition="$vboptions[disable_ajax] != 2"> onclick="return post_thanks_give($post[postid], <if condition="$vboptions[post_groan_integrate]">true<else />false</if>);"</if> <if condition="$display_thanks_image == 'none'">style="display:none"</if> rel="nofollow"><img src="$stylevar[imgdir_button]/post_thanks.gif" alt="$vbphrase[post_thanks_thanks]" border="0" /></a>]]></template>
<template name="post_thanks_javascript" templatetype="template" date="1198126814" username="Abe" version="7.0"><![CDATA[<script type="text/javascript" src="clientscript/post_thanks.js"></script>]]></template>

scott_gersforum 09-09-2008 12:41 PM

I have certain users getting this error when updating their albums.
Rest of the forum seems okay.
Can anyone fix this?

redskull 09-14-2008 03:05 AM

ok so for my template to work without getthing the token error WHAT do i edit/fix

mokujin 09-14-2008 07:47 PM

Hi, I have this function, how can I add CSRF for this:

Code:

function tab(URL) {
  http.open("GET", "tabs.php?f="+URL+"&s="+Math.random(), true);
  http.onreadystatechange=function() {
    if(http.readyState == 4) {
      document.getElementById('forumbits').innerHTML = http.responseText;
        }
  }
  http.send(null);
}

Thanks for helping me

SVTCobraLTD 10-02-2008 03:09 PM

Below is a code for a product, there is no value="$session[sessionhash]" so I am not sure where to add <input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />. Anyone have an idea??


Code:

$stylevar[htmldoctype]
<html dir="$stylevar[textdirection]" lang="$stylevar[languagecode]">
        <head>
                $headinclude
                <title>$vboptions[bbtitle] - $vbphrase[onetouchspamban_title]</title>
        </head>
        $header
        $navbar
<table class="tborder" cellpadding="$stylevar[cellpadding]" cellspacing="$stylevar[cellspacing]" border="0" width="70%" align="center">
<tr>
        <td class="tcat">$vbphrase[onetouchspamban_title]</td>
</tr>
<tr>
        <td class="panelsurround" align="center">
        <div class="panel">
                <div align="$stylevar[left]">
       
                        <div style="margin: 10px">

        <if condition="$_REQUEST['do'] == 'spamcleanconfirm'">
                <form action="misc.php" method="post" name="spamconfirm" id="spamconfirm">
                        $message
                        <input type="hidden" name="do" value="dospamclean" />
                        <input type="hidden" name="userid" value="$banuserid" />
                        <center><input type="submit" class="button" value="$vbphrase[onetouchspamban_confirm_button]" /></center>
                </form>
        </if>

        <if condition="$_POST['do'] == 'dospamclean'">
                $message
        </if>

</div>
                       
        </div>
        </div>

        </td>
</tr>
</table>

        $footer
</body>
</html>


Outbackmark 10-08-2008 11:38 AM

I had the same trouble this took care of it -
Open the template "onetouchban" in Styles and Templates/edit templates -
Find
Code:

<form action="misc.php" method="post" name="spamconfirm" id="spamconfirm">
On the NEXT line insert -
Code:

<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />
Save and edit the same in other styles if you have more that one running.
No more errors - Remember to turn off the IP ban for your test run or you may ban your own IP!!

I also had a security token pop up in a style that has not been updated with the onset of daylight savings in some parts of the world.
The error occurs when the time trys to adjust to daylight savings on profile.php?do=dst.
This is incorperated into the footer template and the security token needs to go on the nesxt line after -
Code:

<input type="hidden" name="s" value="$session[sessionhash]" />

Ohiosweetheart 10-12-2008 06:20 PM

Has anyone gotten this security token error when you click on "Go Advanced" on the QuickReply editor?

If so, what template did you have to edit, (or what form in what template) to fix it??

EDIT - Never mind. I found it. I reverted the Showthread template and it's now fixed. :)

perfphysio 10-24-2008 08:11 PM

Hi guys, I have a second site that uses a small bit of code at the top to search my forum. basically you type the search term on my site, hit search and it feeds that info to the search page on my forum and opens a new window on the forum with the results.

It works fine with the user not logged in to the forum when searching from the other site but when the user is also logged in forum and is then also searching from the other site I get the error

"Your submission could not be processed because a security token was invalid."

I tried commenting out the lines
<input type="hidden" name="s" value="$session[sessionhash]" />
<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />

from my search_forums template but this made no difference

This is my code

<div class="span-8 push-4 last margin_bottom">
<form id="form" action="http://www.******.com/forum/search.php" method="post" name="search" target="_blank">

<input type="hidden" name="s" value="$session[sessionhash]" />
<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />
<input type="hidden" name="do" value="process"/>
<input type="hidden" name="quicksearch" value="1"/>
<input type="hidden" name="showposts" value="1"/>

<label for="query">Search</label>
<input type="text" id="search_field" class="text" name="query" size="18" value="" />
<input type="image" src="/**********/templates/******/images/search.gif" />

</div>

Any ideas on how to work around on this?

skylerj 11-01-2008 11:06 PM

Yeah Exactly same here. This is crap and not good. I wish more help was around I see people asking to explain it 5th grade style and they are ignored. GRRR how many people does it take to scream before somethings done???


Quote:

Originally Posted by dirtyfeast (Post 1617131)
I just installed the latest version of vBulletin, have no mods installed, made a test thread, and I cant delete it. I get this security token error. Contact admin it says. Why does this happen on a newly installed forum with no hacks installed. Could it be the template I am using which is ambience.


PoetJA-1975 11-02-2008 12:49 AM

Run the following query and you should see a list of possible templates that need editing - Then you have to edit each template for each installed style manually:

Code:

SELECT templateid , title , styleid FROM template WHERE template_un NOT LIKE '%<input type="hidden" name="s" value="$session[sessionhash]" />%<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />%' AND template_un LIKE '%<input type="hidden" name="s" value="$session[sessionhash]" />%' ORDER BY title ASC, styleid ASC;
Run the query in your AdminCP --> Maintenance --> Execute SQL Query

Hope this helps - but if you are in the position to hire someone - perhaps you might post a thread in the Paid Requests section or check out my design site ;)

Jacquii.


Quote:

Why does this happen on a newly installed forum with no hacks installed. Could it be the template I am using which is ambience.
Yup - it most definitely is the style needs template(s) edited.

Kaas 12-02-2008 09:44 PM

I have reciently upgraded to the lastest vb, I am now having an issue with a "security token" I was redirected to this perticular post by vb support.. I am using a "Form" created by Elricstorm called "Elricstorm's World of Warcraft Recruitment Form" I have modified the form to be up to date with the changes in the game, everything works fine all the changes show up fine, however when attempting to "post" the form I get the security error, I am in no way a programmer, so my question is what Do I fix and where...? If this has already been answered somewhere pointing me there would be great, I searched but came up[ empty.

I will try and give you the code here.. If anyone can help, and you need more data, please let me know... Thanks a ton..


this is from the top of the form...

PHP Code:

<?xml version="1.0" encoding="ISO-8859-1"?>

<product productid="wow_recruitment" active="1">
    <title><![CDATA[Elricstorm's World of Warcraft Recruitment Form]]></title>
    <description>Damnation guild recruitment form</description>
    <version>2.0.0</version>
    <url>https://vborg.vbsupport.ru/showthread.php?t=1274436</url>
    <versioncheckurl><![CDATA[https://vborg.vbsupport.ru/misc.php?do=checkversion&t=1274436]]></versioncheckurl>
    <dependencies>
        <dependency dependencytype="vbulletin" minversion="3.7.4" maxversion="" />
    </dependencies>
    <codes>
    </codes>
    <templates>
        <template name="wow_form" templatetype="template" date="0" username="" version="1.0.0"><![CDATA[$stylevar[htmldoctype]
<html dir="$stylevar[textdirection]" lang="$stylevar[languagecode]">
<head>
$headinclude
<title>$vboptions[bbtitle] - $formtitle</title>
</head>
<body>
$header
$navbar

<!-- main -->
<if condition="$preview">
<table class="tborder" cellpadding="$stylevar[cellpadding]" cellspacing="$stylevar[cellspacing]" border="0" width="100%" align="center">
    <tr>
        <td class="tcat">
            Preview
        </td>
    </tr>
    <tr>
        <td class="alt1">
            $preview
        </td>
    </tr>
</table>
</if>

<br />
<form name="vbform" action="newthread.php" method="post"<if condition="!is_browser('webtv')"> onsubmit="return vB_Editor['$editorid'].prepare_submit(0, $vboptions[postminchars])"</if>>
<input type="hidden" value="$formname" name="do" />
<input type="hidden" value="submit" name="action" />

<input type="hidden" name="posthash" value="$posthash" />
<input type="hidden" name="poststarttime" value="$poststarttime" />

<style type="text/css">
<!--
.wowtinyc{
    text-align: center;
    text-align: -moz-center;
    font-family: '$fontstyle', cursive;
    font-size: 8pt;
    font-weight: bold;
}
.wowtinyl{
    text-align: center;
    text-align: -moz-center;
    font-family: '$fontstyle', cursive;
    font-size: 8pt;
    font-weight: bold;
}
.wowpc{
    text-align: center;
    text-align: -moz-center;
    font-family: '$fontstyle', cursive;
    font-size: 10pt;
    font-weight: bold;
}
.wowpl{
    text-align: left;
    text-align: -moz-left;
    font-family: '$fontstyle', cursive;
    font-size: 10pt;
    font-weight: bold;
}
.wowsl{
    text-align: left;
    text-align: -moz-left;
    font-family: '$fontstyle', cursive;
    font-size: 9pt;
    font-weight: lighter;
}
.wowsc{
    text-align: center;
    text-align: -moz-center;
    font-family: '$fontstyle', cursive;
    font-size: 9pt;
    font-weight: lighter;
}
-->
</style>

<table class="tborder" cellpadding="$stylevar[cellpadding]" cellspacing="$stylevar[cellspacing]" border="0" width="100%" align="center">
    <tr>
        <td class="tcat" colspan="3">
            $vboptions[bbtitle] - $formtitle
        </td>
    </tr>
    <tr>
        <td class="panelsurround" align="center" colspan="3">
            <table class="panel" cellpadding="0" cellspacing="$stylevar[formspacer]" border="0" width="100%">
                <tr>
                <td align="$stylevar[left]">
                    <fieldset class="fieldset" style="margin:0px">
                        <table cellpadding="0" cellspacing="$stylevar[formspacer]" border="0">
                        <tr>
                            <td>
                                $formpurpose
                            </td>
                        </tr>
                        </table>
                    </fieldset>
                </td>
                </tr>
            </table>
        </td>
    </tr>
</table>


azurekite 12-09-2008 10:43 PM

I'm not sure if this has been suggested yet and I don't care to search through all 10 pages of this to find out.

This is simply what I did to fix my Security Token issues for my custom theme for my board.

Go to your Administrator Control Panel, then choose:

Styles & Templates >> Search in Templates

Inside there you will use the "Find and Replace in Templates" function.

Where it says "Search in Style" you will choose the custom style that is giving you problems.

Where it says "Search for Text" put:

Code:

<input type="hidden" name="s" value="$session[sessionhash]" />
and where it says "Replace with Text" put:

Code:

<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />
<input type="hidden" name="s" value="$session[sessionhash]" />

Then choose "No" for the "Test Replacement Only" option.

And finally choose "Yes" for the "Case-Insensitive" option. (Just to be sure. =D)


Click Find and then keep hitting next till it updates the skins.

That's what I did and now it works like a charm. =D

C138 Kaysone 01-05-2009 04:08 PM

Ummm maybe someone should tell me exactly WHERE to put all this stuff... this is like reading chinese when i cant even read symbols and make out what they mean.. only thing now im worrying about is missing security tokens :( think i screwed up big time and lost it all and now i may have to restart over...

but will this fix all token issues or certain areas? im trying to figure out why im having this one in my flashchat...

flup 01-20-2009 07:51 AM

Quote:

Originally Posted by azurekite (Post 1681983)
I'm not sure if this has been suggested yet and I don't care to search through all 10 pages of this to find out.

This is simply what I did to fix my Security Token issues for my custom theme for my board.

Go to your Administrator Control Panel, then choose:

Styles & Templates >> Search in Templates

Inside there you will use the "Find and Replace in Templates" function.

Where it says "Search in Style" you will choose the custom style that is giving you problems.

Where it says "Search for Text" put:

Code:

<input type="hidden" name="s" value="$session[sessionhash]" />
and where it says "Replace with Text" put:

Code:

<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />
<input type="hidden" name="s" value="$session[sessionhash]" />

Then choose "No" for the "Test Replacement Only" option.

And finally choose "Yes" for the "Case-Insensitive" option. (Just to be sure. =D)


Click Find and then keep hitting next till it updates the skins.

That's what I did and now it works like a charm. =D

You'd better use the testrun first to see which templates are missing the security token and add it manually later. I guess it'll give errors while checking if you page is valid to it's DTD when you have double fieldnames.

--------------- Added [DATE]1232445952[/DATE] at [TIME]1232445952[/TIME] ---------------

Here's a list with (default) templates missing the hidden-field for the securitytoken. These where found in a 3.7.2 version which is updated from 3.5.4 till 3.7.2. The number in front of the template name are the number of fields to be added in total:

2x calenderjump
1x FAQ
2x FORUMDISPLAY
1x forumjump
1x JOINREQUESTS
1x moderation_filter
1x moderation_posts
1x moderation_threads
1x pm_messagelist
6x SHOWTHREAD
1x tag_cloud_page
1x threadadmin_easyspam_skipped_prune
1x WHOSONLINE

Open each of these templates, search for:
HTML Code:

<input type="hidden" name="s" value="$session[sessionhash]" />
and replace with:
HTML Code:

<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />
<input type="hidden" name="s" value="$session[sessionhash]" />


ragtek 02-14-2009 06:55 AM

Shouldn't this be posted in vb category and not programming?
Because you can just use this with vB, it has nothing to do with normal "programming".

moon_spell 02-20-2009 09:12 PM

ok . now witch template have to be edited ? would you please tell me ? all templates ?

--------------- Added [DATE]1235223321[/DATE] at [TIME]1235223321[/TIME] ---------------

i did everything but all the users get this message !!!

Your submission could not be processed because a security token was missing.

If this occurred unexpectedly, please inform the administrator and describe the action you performed before you received this error


the latest release of vbulletin ! please help to slove this !

Mr. Baws 02-23-2009 11:14 AM

i get this error only with mozilla when users try to search forums

tlwwolfseye 03-07-2009 06:49 AM

Could you please tell me which of the Templates I have to change so I donĀ“t get the "Securitytoken" error anymore when submitting the Score for the IbProArcade ? If someone would already know, it would save me a lot of work finding that.

Thanks

darkman 03-15-2009 07:16 PM

1 Attachment(s)
Hi, I did the query posted earlier and when I check the Style ID's, one of the results is -1, as shown in the attachment. When I hover over my styles in style manager none of them come up as -1. When I click on a style to go to the url and change the style id at the end of the url to -1 it comes up as the andromeda style, but in style manager, andromeda comes up as styleid 58. Any clues as to why this is like that? I fixed all the security token issues except for the 7 occurences that happen in this -1 styleid.
Any help would be appreciated. :)

Lynne 03-15-2009 08:30 PM

-1 means the Master Style which you can only see in debug mode.

darkman 03-15-2009 08:41 PM

Thank you - how would I change those templates then?

Lynne 03-15-2009 08:48 PM

Quote:

Originally Posted by darkman (Post 1769048)
Thank you - how would I change those templates then?

You would have to go into debug mode. However, it seems odd that those default templates do not have the security token unless you have done something to modify those templates in the Master Style. There are some forms that do not need the securitytoken and my guess is that those don't. (Mine don't have it in those forms (the couple I checked) and the site runs fine.)

darkman 03-15-2009 09:49 PM

ThanQ Lynne - I appreciate your help. I guess I will ignore them for now.
On another note, I'm no longer getting a flood of emails for security tokens missing, but I have received two of these:
HTML Code:

Missing or Invalid Security Token detected.
 
Script Call Backtrace
=====================
#0 /home/imforums/public_html/forums/includes/functions.php line 2688: eval()
#1 /home/imforums/public_html/forums/global.php line 379: fetch_error(security_token_missing,sendmessage.php)
#2 /home/imforums/public_html/forums/profile.php line 150: require_once(/home/imforums/public_html/forums/global.php)
 
POST Variables
==============
Array
(
    [securitytoken] =>
    [ajax] => 0
)
 
Request URI
===========
/forums/profile.php?do=dst

Any ideas?

Lynne 03-15-2009 10:07 PM

Make sure the security token is present in the footer where the profile.php form is called.

darkman 03-16-2009 03:43 AM

Thanks again Lynne, I have about 7 skins total and from what I can see all the footer templates have the security token. The sql query only shows these results. I have received 8 email notificactions of missing security tokens, all with exactly the same information as what I posted above. Any other ideas?

Lynne 03-16-2009 03:49 AM

That query will most likely not catch modification templates or plugins where they don't have the securitytoken nor will it catch if it is a javascript problem. You can try disabling your modifications and seeing if the error goes away.

Big-K 03-17-2009 05:37 PM

Hello,

I'm trying to implement an add-on (ZP Poll) that shows vb polls in a non-vb page (joomla). Everything works well until users try to vote , then they get the security token issue. This hack is not resident in vbulletin and the only line with a form is
Code:

<form action=\"" . $directory . "/poll.php?do=pollvote&amp;pollid=\"" . $pollid . "\" method=\"post\">"
Any ideas on what I can do please?

Lynne 03-17-2009 05:49 PM

You should ask the author of that modification for help adding the securitytoken.

Big-K 03-17-2009 07:03 PM

1 Attachment(s)
Hi Lynne,

I've been trying to get hold of the developer for days. I was hoping there is a generic way to add tokens to such non-vb pages. I'm attaching the script so you can advise on where I could add the token ?

Lynne 03-17-2009 07:11 PM

I'm no CSRF expert at all. I was able to just add the line to all my custom mods and everything worked perfectly. You can try adding the securitytoken right after the form line you posted above and see if that works.

ndL 05-09-2009 01:06 PM

i have problem with a theme header ( i think so ) quick search (java one) doesnt work with this theme:

where to add special lines to make it work? here is the script

Code:

<!-- designed by hanafi@enthropia.com/napy8gen@yahoo.co.uk for forumtemplates.com -->

<a name="top"></a>
<table width="80%" border="0" align="center" cellpadding="0" cellspacing="0" class="wrapper" style="height:100%;">
  <tr>
    <td class="headerwrap"><table width="100%" border="0" cellspacing="0" cellpadding="0">
      <tr>
        <td valign="top"><table width="100%" border="0" cellpadding="0" cellspacing="0" class="headerwrap2">
          <tr>
            <td><a href="$vboptions[forumhome].php$session[sessionurl_q]">&nbsp;&nbsp;&nbsp;<img src="images/lily/lily_logo.gif" alt="$vboptions[bbtitle]" width="285" height="140" border="0" id="lily_logo" /></a></td>
          </tr>
          <tr>
            <td class="navwrap">
                       
<!-- nav buttons bar -->
    <table id="navstyle" cellpadding="$stylevar[cellpadding]" cellspacing="0" border="0" width="100%" align="center" style="border-top-width:0px">
    <tr align="center">
        <if condition="$show['member']">
            <td><a href="usercp.php$session[sessionurl_q]">$vbphrase[user_cp]</a></td>
        </if>
        <if condition="$show['registerbutton']">
            <td><a href="register.php$session[sessionurl_q]" rel="nofollow">$vbphrase[register]</a></td>
        </if>
        $template_hook[navbar_buttons_left]
        <td><a href="faq.php$session[sessionurl_q]" accesskey="5">$vbphrase[faq]</a></td>
        <td><a href="memberlist.php$session[sessionurl_q]">$vbphrase[members_list]</a></td>
        <td><a href="calendar.php$session[sessionurl_q]">$vbphrase[calendar]</a></td>
        <if condition="$show['popups']">     
            <if condition="$show['searchbuttons']">
                <if condition="$show['member']">
                <td><a href="search.php?$session[sessionurl]do=getnew" accesskey="2">$vbphrase[new_posts_nav]</a></td>
                <else />
                <td><a href="search.php?$session[sessionurl]do=getdaily" accesskey="2">$vbphrase[todays_posts]</a></td>
                </if>
                <td id="navbar_search" ><a href="search.php$session[sessionurl_q]" accesskey="4" rel="nofollow">$vbphrase[search]</a>

 <if condition="$show['quicksearch']">

<script type="text/javascript"> vbmenu_register("navbar_search"); </script></if></td>
            </if>
            <if condition="$show['member']">
                <td id="usercptools" ><a href="$show[nojs_link]#usercptools">$vbphrase[quick_links]</a> <script type="text/javascript"> vbmenu_register("usercptools"); </script></td>     
            </if>
        <else />     
            <if condition="$show['searchbuttons']">
                <td><a href="search.php$session[sessionurl_q]" accesskey="4">$vbphrase[search]</a></td>
                <if condition="$show['member']">
                <td><a href="search.php?$session[sessionurl]do=getnew" accesskey="2">$vbphrase[new_posts_nav]</a></td>
                <else />
                <td><a href="search.php?$session[sessionurl]do=getdaily" accesskey="2">$vbphrase[todays_posts]</a></td>
                </if>
            </if>
            <td><a href="forumdisplay.php?$session[sessionurl]do=markread" rel="nofollow">$vbphrase[mark_forums_read]</a></td>
            <if condition="$show['member']">         
                <td><a href="#" onclick="window.open('misc.php?$session[sessionurl]do=buddylist&amp;focus=1','buddylist','statusbar=no,menubar=no,toolbar=no,scrollbars=yes,resizable=yes,width=250,height=300'); return false;">$vbphrase[open_buddy_list]</a></td>         
            </if>         
        </if>
        $template_hook[navbar_buttons_right]
        <if condition="$show['member']">
            <td><a href="login.php?$session[sessionurl]do=logout&amp;logouthash=$bbuserinfo[logouthash]" onclick="return log_out('$vbphrase[sure_you_want_to_log_out]')">$vbphrase[log_out]</a></td>
        </if>
    </tr>
    </table>

<!-- / nav buttons bar -->
                       
                       
                        </td>
          </tr>
        </table></td>
        <td class="headerR">&nbsp;</td>
      </tr>
    </table></td>
  </tr>
 
  <tr>
    <td valign="top" class="cwrap">
<!-- /end long header part -->

<!-- content table -->
$spacer_open
<br/>
<div align="center">@vbbanners@</div>
$_phpinclude_output


Lynne 05-09-2009 02:58 PM

Quote:

Originally Posted by ndL (Post 1807462)
i have problem with a theme header ( i think so ) quick search (java one) doesnt work with this theme:

where to add special lines to make it work? here is the script

If you think it's a problem with a particular mod, go read the mod thread and see if anyone posted the fix in there. There was also a discussion in this thread about fixing javascript (not java, that is very different) problems. Did you read the thread at all?

mokujin 05-09-2009 08:40 PM

Hi Lynne, do you know how to make the Default var?
Thank you

Lynne 05-10-2009 02:43 AM

Quote:

Originally Posted by mokujin (Post 1807691)
Hi Lynne, do you know how to make the Default var?
Thank you

I don't understand what you mean, sorry.

mokujin 05-10-2009 04:37 PM

Quote:

Originally Posted by Lynne (Post 1807821)
I don't understand what you mean, sorry.

Hi Lynne,
I mean how to make the AJAX call a script without click a button (or a link) when a user just loaded the page.
For example: I have Installed AJAX Advanced Forum Statistic.
I browse the index page, that Mod loads the Statistics using AJAX for the default.

I hope you understand what I mean.


All times are GMT. The time now is 03:43 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01876 seconds
  • Memory Usage 1,925KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (12)bbcode_code_printable
  • (3)bbcode_html_printable
  • (1)bbcode_php_printable
  • (9)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete