Administrative and Maintenance Tools - Security Token Notification

This simple mod logs security token erorrs to vBulletin PHP error log and optionally sends an E-Mail to the webmaster.

Example Log Entry

Missing or Invalid Security Token detected.

Script Call Backtrace
=====================
#0 C:\Programme\XAMPP Lite\htdocs\vb310\includes\functions.php line 2420: eval()
#1 C:\Programme\XAMPP Lite\htdocs\vb310\includes\init.php line 417: fetch_error(security_token_missing,ltr,sendmessage.php)
#2 C:\Programme\XAMPP Lite\htdocs\vb310\global.php line 20: require_once(C:\Programme\XAMPP Lite\htdocs\vb310\includes\init.php)
#3 C:\Programme\XAMPP Lite\htdocs\vb310\newthread.php line 49: require_once(C:\Programme\XAMPP Lite\htdocs\vb310\global.php)

POST Variables
===============
Array
(
    [do] => foo
    [f] => 3
    [forumid] => 3
    [securitytoken] => 
)

Request URI
===========
/vb368pl1/newthread.php?do=foo

Datum: 24.04.2008 11:36:08
Benutzername: Kirby
IP-Adresse: 127.0.0.1

If you do not know what this is about, you most likely won't need it

[webghey]

I've yet to see an explanation on how to decode, or what really needs done on any user in the thread. I understand it's missing a security code - for this error to show, but I don't know how to resolve it, or which template/page of code needs modified.

Am I looking at the stock vb pages that were ftp'ed, or what am I looking at?

Sorry for the pm I sent the mods asking for help. I didn't notice the "do not pm" warning until after I had sent the message.

3.72 patch 1 - stock vb template

Missing or Invalid Security Token detected. Script Call Backtrace =====================
#0 /forums/includes/functions.php line 2592: eval()
#1 /forums/global.php line 386: fetch_error(security_token_missing,sendmessage.php )
#2 /forums/editpost.php line 51: '
/forums/global.php)
#3 /home/civic8th/public_html/forums/vbseo.php line /forums/editpost.php)

POST Variables
============== Array ( [ajax] => 1 [securitytoken] => ) Request URI =========== /forums/editpost.php?do=updatepost&postid=undefined

Missing or Invalid Security Token detected. Script Call Backtrace =====================
#0 /forums/includes/functions.php line 2592: eval()
#1 /forums/global.php line 386: fetch_error(security_token_missing,sendmessage.php )
#2 /forums/ajax.php line 58: /forums/global.php)
#3 forums/vbseo.php line 1082: forums/ajax.php)

POST Variables ============== Array ( [ajax] => 1 [securitytoken] => ) Request URI =========== /forums/ajax.php?do=quickedit&p=3396930

Missing or Invalid Security Token detected. Script Call Backtrace =====================
#0 /forums/includes/functions.php line 2592: eval()
#1 /forums/global.php line 386: fetch_error(security_token_missing,sendmessage.php )
#2 /forums/attachment.php line 114: forums/global.php)
#3 forums/vbseo.php line 1129: /forums/attachment.php)

POST Variables ============== Array ( [ajax] => 1 [securitytoken] => ) Request URI =========== /forums/attachment.php?attachmentid=14365

Missing or Invalid Security Token detected. Script Call Backtrace =====================
#0 /forums/includes/functions.php line 2592: eval()
#1 /forums/global.php line 386: fetch_error(security_token_missing,sendmessage.php )
#2 /forums/editpost.php line 51: /forums/global.php)
#3 /forums/vbseo.php line 1129: forums/editpost.php)

POST Variables ============== Array ( [ajax] => 1 [securitytoken] => ) Request URI =========== /forums/editpost.php?do=updatepost&postid=undefined

Missing or Invalid Security Token detected. Script Call Backtrace =====================
#0 /forums/includes/functions.php line 2592: eval()
#1 /forums/global.php line 386: fetch_error(security_token_missing,sendmessage.php )
#2 /forums/newreply.php line 82: /forums/global.php)
#3 /forums/vbseo.php line 1129: /forums/newreply.php)

POST Variables ============== Array ( [ajax] => 1 [message] => [securitytoken] => ) Request URI =========== /forums/newreply.php?do=postreply&t=109619

Missing or Invalid Security Token detected. Script Call Backtrace =====================
#0 /forums/includes/functions.php line 2592: eval()
#1 forums/global.php line 386: fetch_error(security_token_missing,sendmessage.php )
#2 /forums/ajax.php line 58: /forums/global.php)
#3 /forums/vbseo.php line 1082: /forums/ajax.php)

POST Variables ============== Array ( [ajax] => 1 [securitytoken] => ) Request URI =========== /forums/ajax.php?do=quickedit&p=3393980

[webghey]

https://vborg.vbsupport.ru/showthread.php?t=177013
I went through this -

I see some of my things above say vbseo - and according to vbseo, it's not them

Since vbseo doesn't create or alter form elements, it's not related.

it's either a mod, or your skin. Did you revert all your templates?

http://www.vbseo.com/f77/vbseo-secur...missing-24817/

vbulletin.com's answer?

If this problem is only happening to some people and cannot be reproduced, the probable cause is their browser cache. Have these users either try a different browser or clear their browser cache.

Otherwise an ISP cache may also be to blame.

http://www.vbulletin.com/forum/showp...26&postcount=4

Some people have reported this problem when uploading very large file attachments.

can we define "large"


I've never SEEN this error, ............ help

[webghey]

<a href="http://www.vbulletin.com/forum/showthread.php?t=272803" target="_blank">http://www.vbulletin.com/forum/showthread.php?t=272803</a>

another member from VB not knowing what the problem is???

"vBulletin Developer
If it's not happening consistently, it's probably not that big of a deal."

[webghey]

vBulletin Team
It should be added that tokens are only valid for a limited time. The time ranges between 1 and 3 hours. In the normal scheme of things, this won't cause any problems. However if a user loads your page and then wanders off to do something else and comes back later, they can receive this error.

.........
http://www.vbulletin.com/forum/showp...52&postcount=4

[webghey]

a comment or ANYthing would be amazing right now....staff online who've used this hack - you could comment please

[MrPHD]

Hi, please see this only one simple change. http://www.vbulletin.com/forum/showthread.php?t=269069

[MrPHD]

"...Go to your Style manager open your default theme Template Editor and find FORUM DISPLAY TEMPLATE - FORUMDISPLAY open and copy all content from that, now open your template are you using and Template Manager - Forum Display template - ForumDisplay and cut out the old one and paste new. Have a nice day..."

[obiefan]

Done this... Still getting them.

I have done everything everyone has said, short of uninstalling or disabling hacks.

What does disabling hacks do, other than to prove it's a hack... these errors are sp sporadic that it's almost impossible to see the errors in the first place. so disabling hacks, you'd never see them again, and also not have any hacks...

Is there a method to follow that I could inspect the "code" for all of my hacks and find the offending party?

THANKS!

Originally Posted by MrPHD

"...Go to your Style manager open your default theme Template Editor and find FORUM DISPLAY TEMPLATE - FORUMDISPLAY open and copy all content from that, now open your template are you using and Template Manager - Forum Display template - ForumDisplay and cut out the old one and paste new. Have a nice day..."

[roady89]

I am also still getting the error emails. I installed the STN a few months back, went over all the templates, made the edits but still getting error emails. I have checked and doubled checked many times but no joy. One very common error is /search.php?do=process. I checked all the search templates and they are all correct. The funny thing is, my users are not reporting any errors but before I patched the templates they would report them. It's almost like these errors are not displaying for users but the STN is reporting them. I finally just disabled STN till I can find a solution.

Any suggestions where to look?

[tony adams]

excellent - saved me hours of searching