vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)
-   -   Usercp issue (https://vborg.vbsupport.ru/showthread.php?t=185765)

yankee831 07-19-2008 06:12 PM

Usercp issue
 
Some members are getting this when they try and access the usercp:

"Your submission could not be processed because a security token was missing or mismatched.

If this occurred unexpectedly, please inform the administrator and describe the action you performed before you received this error."

Other members (and myself) ave no problems accessing the usercp. And one member said clicking it takes her to some outside site and she ca't get back in. Sounds weird to me. I looked at the page properties and the page properties are correct it seems.

So does anyone have any ideas why its working for some members and not others?

snakes1100 07-19-2008 07:25 PM

Please create a new style with no parent, make this style use able for those members, if they report no issues on the new style, then there is a security token issue in the template, could be related to your upgrade of the site and not reverting all the templates.

As well, some hacks can produce a security token issue as well, you can also try globally disabling your hacks and ask the user if the issue is still present, if its not manually disable them one at a time and have the suer test with you to find the hack that is causing the issue.

dmperry24 08-25-2008 05:38 PM

I ran some tests, and when I get the error message mentioned aove in Internet Explorer and AOL Explorer. In Firefox and Netscape Navigator, there is no error message, and the UserCP loads up fine. I know all about making sure the security token is included in the templates where a form is being sent see:

https://vborg.vbsupport.ru/showthrea...ty+token+error

More tests to come.
Mike

--------------- Added [DATE]1219763604[/DATE] at [TIME]1219763604[/TIME] ---------------

I tried loading my site with the UserCP error message on my Macintosh, and I did not get the error message in Safari, Opera, or Firefox on the Mac. I did not try IE or Netscape yet to see if the error recurs. I suspect there is some kind of incompatability with the browser, and the error happens because there is a different activity in the CP templates that require a security token than the well-known line:

value="$session[sessionhash]"

That needs to have:

<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />

Inserted after it. But I am not hip enough as a programmer to figure it out. Ideas? Anyone? Anyone? Bueller?


All times are GMT. The time now is 03:08 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01015 seconds
  • Memory Usage 1,714KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (3)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete