Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 General Discussions
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 05-10-2009, 02:02 PM
dukegotgame dukegotgame is offline
 
Join Date: Apr 2007
Posts: 55
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default "security token was missing"

I have two problems that I suspect are connected and I'm not sure what I did or what to do.
  • I have members contacting me via email saying they are getting "Security Token Missing" when they are attempting to login.
  • I am also not seeing an new registers so I tested it and after I accept the rules and hit register, I get "You have left a required field blank". Although the only field is to check the accept rules box.


Does anyone have any ideas?

--------------- Added [DATE]1241969778[/DATE] at [TIME]1241969778[/TIME] ---------------

I am now 99% sure that I have messed this one up myself in a template edit. I have switched to another style, and tried to register an account and had no problem.

So what template should I be looking at that has to do with registering?
Reply With Quote
  #2  
Old 05-10-2009, 02:40 PM
Lynne's Avatar
Lynne Lynne is offline
 
Join Date: Sep 2004
Location: California/Idaho
Posts: 41,180
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Look at any templates that are used on the registration page (vboptions > General Settings > Add Template Name in HTML Comments > set to Yes . Then go back to your page and view the source code and you will see the name of all the templates for that page in the source code).
Reply With Quote
  #3  
Old 05-10-2009, 03:49 PM
dukegotgame dukegotgame is offline
 
Join Date: Apr 2007
Posts: 55
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Here's another strange update. Everything is fine in my old style, but in my new and the default vb styles, I can not register an account.

I looked at the register.php page source here's one notable difference I see, but I do not know if it even matters::


The style I can register with:

<form action="register.php?do=register" method="post">
<input type="hidden" name="s" value="" />
<input type="hidden" name="securitytoken" value="guest" />
<input type="hidden" name="do" value="register" />
<input type="hidden" name="url" value="http://www.MYSITE.com/forum/" />
<input type="hidden" name="month" value="" />
<input type="hidden" name="day" value="" />
<input type="hidden" name="year" value="" />

<input type="hidden" name="ejtoMUft" value="gyDSerIj" />
<input type="hidden" name="WhjdFopQ" value="7865249rtbg25hdiv783dg8rujv5d4t" />

<input type="hidden" name="who" value="adult" />



The style I can not register with:

<form action="register.php?do=register" method="post">
<input type="hidden" name="s" value="" />
<input type="hidden" name="securitytoken" value="guest" />
<input type="hidden" name="do" value="register" />
<input type="hidden" name="url" value="http://www.MYSITE.com/forum/" />
<input type="hidden" name="month" value="" />
<input type="hidden" name="day" value="" />
<input type="hidden" name="year" value="" />

<input type="hidden" name="who" value="adult" />






I notice this:


<input type="hidden" name="ejtoMUft" value="gyDSerIj" />
<input type="hidden" name="WhjdFopQ" value="7865249rtbg25hdiv783dg8rujv5d4t" />


Is missing from the one I can not register. Is this something to do with the Spam bot prevention from registering?

--------------- Added [DATE]1241974473[/DATE] at [TIME]1241974473[/TIME] ---------------

Quote:
Originally Posted by Lynne View Post
Look at any templates that are used on the registration page (vboptions > General Settings > Add Template Name in HTML Comments > set to Yes . Then go back to your page and view the source code and you will see the name of all the templates for that page in the source code).


MANY THANKS!!!!

Getting me to look into my source code fixed this for me. Thank you. It was the spam bot prevention. I hadn't edited the template on the new style for that. I'm not sure about the security token issue yet, but I'm pretty sure they were related.
Reply With Quote
  #4  
Old 05-10-2009, 04:04 PM
Lynne's Avatar
Lynne Lynne is offline
 
Join Date: Sep 2004
Location: California/Idaho
Posts: 41,180
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Look at the Spam Bot modification and see if they asked you to add those lines to the form.
Reply With Quote
  #5  
Old 05-15-2009, 07:46 PM
dukegotgame dukegotgame is offline
 
Join Date: Apr 2007
Posts: 55
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Well that fixed the registration problem. But I am still getting hit with a ton of contact emails stating that they have signed up but when they go to login they are gotting the message:

"Security Token Missing"

Any ideas?
Reply With Quote
  #6  
Old 05-15-2009, 08:07 PM
Lynne's Avatar
Lynne Lynne is offline
 
Join Date: Sep 2004
Location: California/Idaho
Posts: 41,180
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Read this - Implementing CSRF Protection in modifications
Reply With Quote
  #7  
Old 05-18-2009, 01:04 AM
dukegotgame dukegotgame is offline
 
Join Date: Apr 2007
Posts: 55
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I think I have the problem diagnosed. Now the question is, can anyone help me out.


There are times when users login, they are automatically re-directed to ttp://www.mywebsite.com/forum/profile.php?do=dst


I do not know why the re-direct happens. This doesn't happen when I log in, but I have replicated it with another account. Here is the vbulletin error that you get after the redirection:





If you hit back on the browser after this message, everything is fine.


Any help is appreciated!
Reply With Quote
  #8  
Old 05-18-2009, 01:57 AM
Lynne's Avatar
Lynne Lynne is offline
 
Join Date: Sep 2004
Location: California/Idaho
Posts: 41,180
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Check your footer template and make sure it has the security token in the form as mentioned in the article I linked you to.
Reply With Quote
  #9  
Old 05-18-2009, 02:23 AM
dukegotgame dukegotgame is offline
 
Join Date: Apr 2007
Posts: 55
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Lynne View Post
Check your footer template and make sure it has the security token in the form as mentioned in the article I linked you to.

Lynne,

I have to say thanks again. I don't know why you take it upon yourself to answer everyone's questions to the best of your ability, but it's great you are here.

That fixed the problem I was able to emulate and hopefully the problem altogether. How did you know it had to be the footer? Was DST Daylight Savings Time?
Reply With Quote
  #10  
Old 05-18-2009, 02:43 AM
Lynne's Avatar
Lynne Lynne is offline
 
Join Date: Sep 2004
Location: California/Idaho
Posts: 41,180
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I've seen a LOT of problems posted here and after a while you learn what the answers are to some of problems.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 03:01 AM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.05256 seconds
  • Memory Usage 2,260KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (2)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete