[kh99]

Originally Posted by NetSlider

okay, thank you.
Must i observe any special rules or can i send a request to ajax.php?mycustomvar=mycustomvalue

greetings

I guess you figured out that you'd want to post a unique value for 'do' and check for it in your plugin, and if it matches, echo some xml (or whatever you want to return). I don't think you should exit (in case there are are plugins on that hook).

Edit:
i try to use the given "verifyusername"-funtion of ajax.php, but i got a securitytoken-error.
how can i get the right securitytoken?

That's the value of $vbulletin->userinfo['securitytoken']. If the html page with the js that's making the ajax call is a vb page (or includes global.php) then you're set, you can just use hat value. Otherwise you probably have to figure out how to get it. I noticed just now that's there's a function in ajax.php that returns it, so maybe you could make an initial call to get the value. I think another way would be to write your own script (maybe start by copying ajax.php and delete the stuff you don't need), and in the new script define CSRF_PROTECTION as false.