Administrative and Maintenance Tools - Security Token Notification

This simple mod logs security token erorrs to vBulletin PHP error log and optionally sends an E-Mail to the webmaster.

Example Log Entry

Missing or Invalid Security Token detected.

Script Call Backtrace
=====================
#0 C:\Programme\XAMPP Lite\htdocs\vb310\includes\functions.php line 2420: eval()
#1 C:\Programme\XAMPP Lite\htdocs\vb310\includes\init.php line 417: fetch_error(security_token_missing,ltr,sendmessage.php)
#2 C:\Programme\XAMPP Lite\htdocs\vb310\global.php line 20: require_once(C:\Programme\XAMPP Lite\htdocs\vb310\includes\init.php)
#3 C:\Programme\XAMPP Lite\htdocs\vb310\newthread.php line 49: require_once(C:\Programme\XAMPP Lite\htdocs\vb310\global.php)

POST Variables
===============
Array
(
    [do] => foo
    [f] => 3
    [forumid] => 3
    [securitytoken] => 
)

Request URI
===========
/vb368pl1/newthread.php?do=foo

Datum: 24.04.2008 11:36:08
Benutzername: Kirby
IP-Adresse: 127.0.0.1

If you do not know what this is about, you most likely won't need it

[Andreas]

@hIBEES
You are using 3.7 RC4 and did not apply the patch for clientscript/vbulletin_global.js
See
http://www.vbulletin.com/forum/proje...?issueid=25287

[Boofo]

I didn't apply the patch and I never saw any error.

[Goomzee]

it;s install me succesfully but how it;s works

[Bounce]

Originally Posted by Andreas

@hIBEES
You are using 3.7 RC4 and did not apply the patch for clientscript/vbulletin_global.js
See
http://www.vbulletin.com/forum/proje...?issueid=25287

Thanks I am sure I have done that but will check again

Originally Posted by Goomzee

it;s install me succesfully but how it;s works

See post 38 :up:

vbOptions > Error Handling & Logging,its off by default,its at the bottom of the logging page

[Bounce]

Thanks Andreas I did indeed have the & missing,thought I had done that too.


All is well with the mood hack,thanks for this excellent add-on :up:

[yaoren]

OMG ty for this although still having issues. I did the global patch and am still getting notices regarding the security token with the help of your hack. So my question is now what? Thanks to your work I've been able to find out what's causing the error message and although it stopped popping up on my forums I'm still getting emails notifying me.

Should I be taking this now up with the creator of the mod? Or is there anything else I can do in the mean time since I've already left a message in the hack thread.

[dancue]

Thank you for the hack Andreas.

I'm having an issue with my hide hack (itsid). I hit quickreply and receive this error over the hidden content. (instead of revealing the content)

Knowing that, I installed this hack to see what the issue is. This is the e-mail I got.

Missing or Invalid Security Token detected.

Script Call Backtrace
=====================
#0 /home/hipho13/public_html/forum/includes/functions.php line 2528: eval()
#1 /home/hipho13/public_html/forum/includes/init.php line 417:
fetch_error(security_token_missing,ltr,sendmessage .php)
#2 /home/hipho13/public_html/forum/global.php line 20:
require_once(/home/hipho13/public_html/forum/includes/init.php)
#3 /home/hipho13/public_html/forum/showthread.php line 102:
require_once(/home/hipho13/public_html/forum/global.php)
#4 /home/hipho13/public_html/forum/vbseo.php line 1129:
require(/home/hipho13/public_html/forum/showthread.php)

POST Variables
==============
Array
(
[do] => whatever
[p] => 725
[all] => 725
[postid] => 725
[securitytoken] =>
)

Request URI
===========
/forum/showthread.php

Anyone want to point me in the right direction? I'm aware I have to implement CSRF Protection, I just don't know where.

[soulface]

Missing or Invalid Security Token detected.

Script Call  Backtrace
=====================
#0  /home/doshomik/public_html/includes/functions.php line 2528: eval()
#1  /home/doshomik/public_html/includes/init.php line 417:  fetch_error(security_token_missing,ltr,sendmessage.php)
#2  /home/doshomik/public_html/admincp/global.php line 34:  require_once(/home/doshomik/public_html/includes/init.php)
#3  /home/doshomik/public_html/admincp/newsproxy.php line 25:  require_once(/home/doshomik/public_html/admincp/global.php)

POST  Variables
==============
Array
(
    [ajax] => 1
     [securitytoken] => 
)

Request  URI
===========
/admincp/newsproxy.php

OK, can anyone describe in a normal language () on how can I identify which hack is causing the problem by seeing this msg ?

thx

[Speedster123]

Hi Andreas,
Danke f?r dieses n?tzliche Script, nur komme ich mit den Fehlermeldungen nicht klar. Was l?uft hier verkehrt??

Missing or Invalid Security Token detected.

Script Call Backtrace
=====================
#0 varwww/web54/html/includes/functions.php line 2528: eval()
#1 varwww/web54/html/includes/init.php line 417:
fetch_error(security_token_missing,ltr,sendmessage.php)
#2 varwww/web54/html/global.php line 20:
require_once(/var/www/web54/html/includes/init.php)
#3 varwww/web54/html/profile.php line 141:
require_once(/var/www/web54/html/global.php)
#4 varwww/web54/html/vbseo.php line 1121:
require(/var/www/web54/html/profile.php)

POST Variables
==============
Array
(
[s] =>
[do] => dst
[securitytoken] =>
)

Request URI
===========
/profile.php?do=dst

[lange]

Thanks. I will try it.