When you call api_init, you get given an access token.
Code:
array (
'apiversion' => 4,
'apiaccesstoken' => '31e6c1ea1ae6eca7a538057781234567',
'bbtitle' => 'Test Forum',
'bburl' => 'http://www.xxxxxxx.org/vb/40a',
'bbactive' => 1,
'forumhome' => 'index',
'vbulletinversion' => '4.1.10',
You pass this in all other calls as 'api_s', this is the sessionhash for your user.
Code:
api_c = 2
api_m = private_messagelist
api_v = 4
api_s = 31e6c1ea1ae6eca7a538057781234567
api_sig = dab14537fd1bf42119a359ee6265fa0a
folderid=-1