Security token with external search field.

[theybannedme]

Yes, it has a security token in the source code but it says invalid:

var SESSIONURL = "";
var SECURITYTOKEN = "1240854144-f86c4260645d2[remainder deleted for security reasons]";
var IMGDIR_MISC = "lunablack/misc";
var vb_disable_ajax = parseInt("0", 10);

[Dismounted]

I'm talking about the hidden input...

<input type="hidden" name="securitytoken" value="SOMETHINGHERE" />

[theybannedme]

This is on the search page:

<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />

This is on the results (invalid security token) page:

var SECURITYTOKEN = "LONG STRING OF NUMBERS/LETTERS";

[Lynne]

Your input field is not correct - the echo statement is wrong. You'll need to play with it... perhaps ". $bbuserinfo['var'] ." ?

[theybannedme]

Originally Posted by Lynne

Your input field is not correct - the echo statement is wrong. You'll need to play with it... perhaps ". $bbuserinfo['var'] ." ?

Thanks for your suggestion. I tried it but am getting an identical result. Perhaps this cannot be done?

[Dismounted]

Why are you reading the "var SECURITYTOKEN = " bit? That is the vBulletin Javascript, not your input - you need to look at the input's code in the source...

[theybannedme]

Originally Posted by Dismounted

Why are you reading the "var SECURITYTOKEN = " bit? That is the vBulletin Javascript, not your input - you need to look at the input's code in the source...

I'm sorry, I'm techtarded and I don't understand.

[Dismounted]

When you've loaded up the page in your browser, view the source, and find this line:

<input type="hidden" name="securitytoken" value="

[theybannedme]

Originally Posted by Dismounted

When you've loaded up the page in your browser, view the source, and find this line:

<input type="hidden" name="securitytoken" value="

This is what I have, which is what I coded in. So confused, I feel like I'm just going in circles.

<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />

[NetRover]

Originally Posted by theybannedme

This is what I have, which is what I coded in. So confused, I feel like I'm just going in circles.

<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />

Hi there, I'm far from an expert and this thread has just resolved my problem creating my own search.

Are you sure you need the full server path to your global.php?

Mine is fine copying the example exactly and using:

<?php
require_once('./global.php');

?>

My custom search file is within the forum root folder though.