ERROR "security token was missing"
 

Hi peeps,

Well recently our ISP had an outtage, but since it's all come back online we've had nothing but problems. 1st of all no-one could upload files to the server from the local PC.
But today no-one can even post, we also can't login unless the cookie is stored on your PC.
No-one can get onto Admincp. All with the same error.

Your submission could not be processed because a security token was missing

Now I've read lots of places this happened after an upgrade due to peoples templates and the CSRF. But our VB hadn't been upgraded, it was running VB 3.7.2 PL2.

Today I have tried upgrading like normal which was successful (no errors)

But still getting the "Security Token Is Missing" error.

I have read every bit of documentation I can find on the problem but none seem to help.

Help :)

Hades

Create a New Style with No Parent Style. Browse your site using this style, does your issue persist?

I have now tried everything I can think of....

Hosts swear it's not them but we have the same issue on our testbed forum running on the same server. This is running a much older version and using it's own database.

Any ideas anyone........?:(

Did you miss my post?...

And how do I manage that without being able to login to the Admincp?

You shouldn't really be getting it in the AdminCP...

Hmm, try re-uploading all non-image vBulletin files making sure the version of the files is appropriate to the version you have installed. Ensure these files overwrite existing ones on your server. If there is still no result try disabling your modifications, see Help! I've broken my board! for code to disable modifications.

Like I say this same problem is happening on the test forums that we have.

The test forums have not been upgraded for 2-3 months or more and is in a password protected directory running on a seperate mysql database. This server also has exactly the same issue making me think this is more a hosting problem.

I have tried upgrading, reinstalling, every trick I can think of.

Do you have any ideas what would cause this from the hosts end?
They did have some routing issues a few days ago and I wondered if this problem could be caused by packets taking a different route back to the the client?

Thanks for your help so far Opserty :)

Its something that has gone wrong with your vBulletin, not hosting. They plugged a security hole (http://www.vbulletin.com/forum/showthread.php?t=268124 this was for 3.7 RC4 but its also part of any version after). Follow the instructions I gave in my previous post...

I have disabled all plugins as recommended which has removed chat etc from our site. So it obviously did the trick.

But I can still not login to admincp. No-one can logon to the forums.

Basically this problem occurred without anyone touching our Vbulletin install. No upgrades were done to cause this issue it just started happening after our host had an outtage.

Any other ideas opserty?

Hades

PS I should also point out the live version is running 3.7.3 now and the older testbed is running 3.7.2

Did you reupload all the non-image vBulletin files? (See post #6)

(By that I mean a fresh copy downloaded from vBulletin.com)