[PleaseHelp]

Originally Posted by Paul M

When you call api_init, you get given an access token.

array (
  'apiversion' => 4,
  'apiaccesstoken' => '31e6c1ea1ae6eca7a538057781234567',
  'bbtitle' => 'Test Forum',
  'bburl' => 'http://www.xxxxxxx.org/vb/40a',
  'bbactive' => 1,
  'forumhome' => 'index',
  'vbulletinversion' => '4.1.10',

You pass this in all other calls as 'api_s', this is the sessionhash for your user.

api_c = 2
api_m = private_messagelist
api_v = 4
api_s = 31e6c1ea1ae6eca7a538057781234567
api_sig = dab14537fd1bf42119a359ee6265fa0a
folderid=-1

Thanks for your assistance, Paul. However, we are already doing what you have outlined above. That's simply how to sign and execute any method with the API. We've already gotten that to work a long time ago, that isn't the problem here.

The problem is how to keep a user logged in AFTER you've run the login_login method. Specifically, this:

"So after this API call (login_login), client should call api_init (get new session as well as new common $show variables) or api_getsecuritytoken to get the new securitytoken. Once the client gains both the new sessionhash and the securitytoken, please save them in application session vars. After this the login process is done. You need to pass the new sessionhash to the API and use the new securitytoken to sign the requests in future API method calls."

How do we do that?