Security Tokens

[chrisbeau]

Im having a problem with security tokens.

When a new member joins and they go to edit there profile they get a security tokens message.

New registrations are

PHP Code:

Is DST currently in effect ? = no 


I change it from this to yes and the problem stops, but come the time when the clocks go forward or back, we have to manually do this for everyone.

Can someone please advise, this has been going on for months now, I tried disabling all products, and have removed all themes/skins bar the two originals but it has made no difference.


Failing that is there any mod/hack that allows the changing of

PHP Code:

Is DST currently in effect ? 


for all users rather than me having to do it individually ?

[Lynne]

Make sure your footer template has been updated to have the security token present. And make sure the link to profile.php in the footer is correct for every page (like if you have some pages outside the forum directory that uses this footer, it won't be correct using the default link).

[chrisbeau]

Originally Posted by Lynne

Make sure your footer template has been updated to have the security token present. And make sure the link to profile.php in the footer is correct for every page (like if you have some pages outside the forum directory that uses this footer, it won't be correct using the default link).

Link code in the footer is as follows:

PHP Code:

<form action="profile.php?do=dst" method="post" name="dstform">
    <input type="hidden" name="s" value="$session[sessionhash]" />
    <input type="hidden" name="do" value="dst" />
</form> 


Seem ok ?

Not sure what you mean by make sure it has the security token present, what piece of code should I be looking for ?

I dont have any pages outside the forum root.

[Jimandbob]

The code should be,

PHP Code:

<form action="profile.php?do=dst" method="post" name="dstform">
    <input type="hidden" name="s" value="$session[sessionhash]" />
    <input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />
    <input type="hidden" name="do" value="dst" />
</form> 


[chrisbeau]

Cheers guys that seems to have cleared it all up