[Lynne]

This is from the memberlist_search template:

<form action="memberlist.php?do=getall" method="post">
<input type="hidden" name="s" value="$session[sessionhash]" />
<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />
<input type="hidden" name="do" value="getall" />

Is the securitytoken getting populated on the page (check the page source)? Perhaps you removed some needed stuff from your php page? It's very hard to tell what is going on when you've only posted a small bit of the template.