vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)
-   -   Security Ticket Missing or Unmatched? (https://vborg.vbsupport.ru/showthread.php?t=181307)

ownerblade 06-02-2008 06:49 PM

Security Ticket Missing or Unmatched?
 
Your submission could not be processed because a security token was missing or mismatched.

If this occurred unexpectedly, please inform the administrator and describe the action you performed before you received this error.

cheat-master30 06-02-2008 07:11 PM

Where are you getting this error? If in a custom form, add this field:

Code:

<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />

ownerblade 06-02-2008 07:18 PM

I get it every time I try to post.

Lynne 06-02-2008 08:11 PM

This thread talks about it and how to fix it - Implementing CSRF Protection in modifications

ownerblade 06-02-2008 08:19 PM

Where do I put those codes? What files? It is unclear

Opserty 06-02-2008 08:35 PM

Please ensure you have reverted all your templates, if this does not solve your issue create a New Style with no Parent Style and test the functionality again.

ownerblade 06-02-2008 08:38 PM

Do you have a downgrade to 3.6.8?

Opserty 06-02-2008 09:04 PM

No, as I mentioned in my previous post, you need to revert any customised templates which are out of date. (The should be listed on the AdminCP index page).

If there are none there, create a New Style (AdminCP > Styles & Templates > Style Manager > Add New Style) with no Parent Style and test to see if the error occurs in this skin.

Goomzee 06-03-2008 06:05 AM

i never find that error on my forums but i get that email about

Missing or Invalid Security Token detected.

Quote:

Script Call Backtrace
=====================
#0 /home/mkne/public_html/forums/includes/functions.php line 2528: eval()
#1 /home/mkne/public_html/forums/includes/init.php line 417:
fetch_error(security_token_missing,ltr,sendmessage .php)
#2 /home/mkne/public_html/forums/global.php line 20:
require_once(/home/mkne/public_html/forums/includes/init.php)
#3 /home/mkne/public_html/forums/newreply.php line 82:
require_once(/home/mkne/public_html/forums/global.php)

POST Variables
==============
Array
(
[ajax] => 1
[securitytoken] =>
)

Request URI
===========
/forums/newreply.php?do=postreply&t=1069


Boofo 06-03-2008 07:37 AM

That might be a false positive. I have been getting a couple of them every now and then on default vb files.

Andreas 06-03-2008 08:41 AM

Quote:

Originally Posted by Boofo (Post 1539506)
That might be a false positive. I have been getting a couple of them every now and then on default vb files.

Yes and No ;)

The above happens when the page was generated for a guest, but is later being submitted for a registered user.

As the user was a guest when the page was being generated, the token is empty.
But when he submits it later, he is being logged in - and thus the token is required and missing.

Boofo 06-03-2008 09:12 AM

Ah, ok, that makes sense.

I was also told that a security token error can happen when vb times out in a process, such as uploading a large image file. I get the emails occasionally but have never had any reports of, or seen, any actual security token errors displayed on the site.

Peterpan002 06-04-2008 06:16 PM

Quote:

Originally Posted by Lynne (Post 1539100)
This thread talks about it and how to fix it - Implementing CSRF Protection in modifications

That worked all at least appears to have worked. I was surprised to see that Vbadvanced Links had a surprizing amount of template with the security token code missing about (14) and that was the majority of the template edits for the whole site and boy is there a lot of mods installed.


All times are GMT. The time now is 02:20 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01253 seconds
  • Memory Usage 1,738KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_code_printable
  • (3)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (13)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete