vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)
-   -   Security token custom memberlist search (https://vborg.vbsupport.ru/showthread.php?t=215221)

NetRover 06-03-2009 12:29 AM

Security token custom memberlist search
 
Hi everyone,

I'm a very basic level and I am hoping I can get some help now I am out of my depth.

I wanted to created my own member list search with lots of profile fields removed so I could still keep my main search page.

I am almost done as I copied the source code html from the main member list search.

I have pasted this code into a html page. I thought everything was working fine as it does for me. I does not however work fine for anyone else as they get a security token error.

My html page working for me only had this
Code:

<form action="http://************/memberlist.php?do=getall" method="post">
<input type="hidden" name="s" value="" />
<input type="hidden" name="securitytoken" value="1243980943-7669545ca415e565314d717bb2e4ee96ae05f819" />
<input type="hidden" name="do" value="getall" />


I have now tried this code here but I still get a security token error:
Code:

<form action="http://**************/memberlist.php?do=getall" method="post">
<input type="hidden" name="s" value="" />
<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />
<input type="hidden" name="do" value="getall" />

I assume it is something simple and any expert guidance appreciated.

Lynne 06-03-2009 03:11 AM

This is from the memberlist_search template:
HTML Code:

<form action="memberlist.php?do=getall" method="post">
<input type="hidden" name="s" value="$session[sessionhash]" />
<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />
<input type="hidden" name="do" value="getall" />

Is the securitytoken getting populated on the page (check the page source)? Perhaps you removed some needed stuff from your php page? It's very hard to tell what is going on when you've only posted a small bit of the template.

NetRover 06-03-2009 09:08 AM

Hi Lynne, thank you so much for the reply.

I really appreciate it. There is a lot of code so I'll pm you the link to the html page.

You wont be able to search as it's not for guests but at least you might see what is missing.

Propably loads because I have not put any php into it.

I literally placed the html from the source into a blank html document for the form fields, the header code, the css and the java script from the original search.

thanks again.

--------------- Added [DATE]1244031234[/DATE] at [TIME]1244031234[/TIME] ---------------

Quote:

Originally Posted by Lynne (Post 1822512)
This is from the memberlist_search template:
HTML Code:

<form action="memberlist.php?do=getall" method="post">
<input type="hidden" name="s" value="$session[sessionhash]" />
<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />
<input type="hidden" name="do" value="getall" />

Is the securitytoken getting populated on the page (check the page source)? Perhaps you removed some needed stuff from your php page? It's very hard to tell what is going on when you've only posted a small bit of the template.

Hi again, I have fixed this now by changing the line in the code for the security token to:
Code:

<input type="hidden" name="securitytoken" value="<?php echo $vbulletin->userinfo['securitytoken']; ?>" />
I also changed the file from html to php and then included global.php which I was not doing.

I have one last problem that has occured though in that doing the search I am getting logged out. Anywhere else on my forums even without ticking remember me, I do not ever get logged out.

It works if I tick remember me but I can't expect all my members to do this.

Is there something else I should add to my custom search page to stop users getting logged out?

Lynne 06-03-2009 03:24 PM

Why is your page html? It should be php, not html. If it's html, it's static and thus it won't fill in any variables for you (like $bbuserinfo[securitytoken]).


All times are GMT. The time now is 09:19 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.00997 seconds
  • Memory Usage 1,730KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (3)bbcode_code_printable
  • (2)bbcode_html_printable
  • (1)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (4)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete