"Your submission could not be processed because a security token was missing."

[NOCR]

I first got this error when I tried to change my timezone.
Now it says it every time when I go /usercp.php (it redirects me to profile.php?do=dst and says:

"Your submission could not be processed because a security token was missing.

If this occurred unexpectedly, please inform the administrator and describe the action you performed before you received this error."

!

It took an extremely long time to configure the settings and style template. (I know, you've heard it before and don't care) but I would really appreciate a logical answer rather than "reinstall and re upload all files". I'd rather just replace the one causing the problem.

That said, what is the corrupt file that would cause usercp.php to redirect to profile.php?do=dst?



vB 3.7.3
some mods (All disabled)
style: Transparancity (modified)

[Opserty]

Create a New Style with No Parent Style. Browse the affected pages using this style, does your issue persist?

[Angel-Wings]

That's a style based error and it can be fixed within some minutes

Open in your AdminCP the "Styles & Templates" and search for "profile.php" in the Default Template - looks like:

<!-- auto DST correction code -->
<form action="profile.php?do=dst" method="post" name="dstform">
<input type="hidden" name="s" value="$session[sessionhash]" />
<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />
<input type="hidden" name="do" value="dst" />
</form>

Then copy & paste this and replace it in the same Template in the Style causing the problem.

The "footer" templates usually cause this problem so it should be there. And - usually - the important line.

<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />

is missing so the redirection creates an error message.

[angelpie]

what if your default is the one doing it?

[dodyryda1]

cheers. solved my sketch out!

[mmurtha]

Okay, I searched for the profile.php file, and nothing came up in the styles and templates search.

Can someone please give me the correct path to this file so I can edit it using an FTP client?

I do have that code in the footer of both the default and other theme though, but am still having the security token issue.

I've reuploaded all files a few times and it still does not fix it.

This is an issue in the VB software, so why doesn't anyone seem to have a fix for it? Or why hasn't this been fixed in the latest version?

I also noticed that most of the complaints come from FireFox users.

Thanks, and I'd appreciate it if someone can help.

[Biker_GA]

This isn't an issue with vBulletin. Usually, it's an issue with the custom style you've installed. Have you installed a custom style?

[mmurtha]

Yes, I have a custom styles installed, but it was updated for VB 3.7.1.

I checked the footer file of it, and it has the code above.

I also have all MOds turned off too for a few days now so I could track the problem to see if it is still happening.

Btw, do you know the path for the profile.php? I looked in every location I could thing of, and could not find it. The closest file I found that related to the profil file is the editprofile file, and that isn't it.

Thanks for responding too.

[Biker_GA]

profile.php is in the root installation directory of your vBulletin installation.

[Dan Clement]

Hi folks,

I was having the same error but I seem to have been able to resolve it. I'll run you through what I did in the hopes it'll sort you out too.

In the Admin CP, drop down Styles & Templates, then go to Style Manager. Find the skin you're having trouble with and go to Edit Templates. Find your 'footer' template and find the following snippet of code:

<!-- auto DST correction code -->
<form action="profile.php?do=dst" method="post" name="dstform">
<input type="hidden" name="s" value="$session[sessionhash]" />
</form>

From what I can make out, the error arises because the lines that calls upon the user's security token are omitted leading vB to think that the user doesn't have one. You need to add in a couple of lines to make vB call the security token. To do this, replace the code above with this:

<!-- auto DST correction code -->
<form action="profile.php?do=dst" method="post" name="dstform">
<input type="hidden" name="s" value="$session[sessionhash]" />
<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />
<input type="hidden" name="do" value="dst" />
</form>

Save your changes and try accessing your User CP again. Should have fixed you right up. If not, give me a shout.

Just to re-iterate, you should not have to edit profile.php at all to fix this error and in trying to do so you're probably more likely to break something!