[J98680Bxxxxx]

Thanks Andreas for this Mod. At least it is pointing users on possible files that need to be debugged.

I have just installed (finalupgrade vB 3.7 CR3 ->) vB 3.7 Gold and the vBlog 1.0.5. Smooth installation completed and navigating through the site works fine, until one member tried to post a Blog entry. "Your submission could not be processed because a security token was missing or mismatched."

I have browsed through and read all threads at vB.com and vB.org regarding this issue and ended up here (via Boofo's referral in one of those many threads).

Here is what I got in my logs:

Missing or Invalid Security Token detected.

Script Call Backtrace
=====================
#0 /home/++++++++++/public_html/forum/includes/functions.php line 2528: eval()
#1 /home/++++++++++/public_html/forum/includes/init.php line 417: fetch_error(security_token_missing,ltr,sendmessage.php)
#2 /home/++++++++++/public_html/forum/global.php line 20: require_once(/home/++++++++++/public_html/forum/includes/init.php)
#3 /home/++++++++++/public_html/forum/blog_post.php line 111: require_once(/home/++++++++++/public_html/forum/global.php)

POST Variables
==============
Array
(
    [title] => Just testing
    [message] => Just testing<br>
    [wysiwyg] => 1
    [s] => 
    [do] => updateblog
    [b] => 
    [posthash] => 019bc6a36c2d9a5ea4c8fd568e55ccc1
    [poststarttime] => 1211619819
    [loggedinuser] => 1
    [sbutton] => Post Now
    [allowcomments] => 1
    [status] => publish_now
    [publish] => Array
        (
            [month] => 5
            [day] => 24
            [year] => 2008
            [hour] => 08
            [minute] => 25
        )

    [parseurl] => 1
    [emailupdate] => email
    [blogid] => 
    [securitytoken] => 
)

Request URI
===========
/forum/blog_post.php?do=updateblog

A similar issue has been reported at vB.com (here).

The files (functions.php, init.php, sendmessage.php, global.php, blog_post.php) listed above are brand new (i.e. directly obtained from the finalupgrade).

All templates & styles up-to-date. All those security token are already present in files containing forms. All Mods & Plug-ings disabled.

What's going on with this vB 3.7 Gold? Has anyone figured out a good medecine for this "CSRF Protection"?

In the meantime, I have just took vB 3.7 Gold out of my forum and put back in place my vB 3.7 CR3 - working fine.