[CtrlAltDel]

Maybe I need to update the forum that I'm working with. As this is the code from my functions.php...

PHP Code:

$user['securitytoken_raw'] = sha1($user['userid'] . sha1($user['salt']) . sha1(COOKIE_SALT));
$user['securitytoken'] = TIMENOW . '-' . sha1(TIMENOW . $user['securitytoken_raw']);
$user['logouthash'] =& $user['securitytoken']; 


Assume:
1. myscript.php is a script outside my forum root directory
2. login.php is the standard file included in vB

Appending time() in myscript.php is going to be different than the generated one that would be generated from login.php. So when I pass the hash from one myscript.php to login.php, login.php will error out and then display a new (and correct) logout link w/proper logouthash.

If the newest version of VB has dropped this timestamping feature of the logout hash then this simplifies things dramatically.