Help with remote login

[misuse]

I have a custom cms in front of the /forums/. When logging in from the cms I get the error:
Your submission could not be processed because a security token was missing.

If this occurred unexpectedly, please inform the administrator and describe the action you performed before you received this error.

Here is the code. I did research on it and found this code somewhere months ago. I whitelisted .domain.com in the vbulletin general options as well.

Help!

<form action="http://www.lll.com/forums/login.php" method="post" onsubmit="md5hash(vb_login_password,vb_login_md5pa ssword)">
<div class="form">
<div class="field">
<input name="vb_login_username" type="text" />
</div>
<div class="field">
<input name="vb_login_password" type="password" />
</div>
<div class="button-login">
<input type="submit" value="" class="submit-login"><br />
<a href="http://www.kkkl.com/forums/register.php">NOT A MEMBER YET?</a><br />
</div>
</div>
</form>

[kh99]

Try adding

        <input type="hidden" name="do" value="login" />

to your form.

[Lynne]

Don't forget to add the security token:

<input type="hidden" name="securitytoken" value="{vb:raw bbuserinfo.securitytoken}" />

[kh99]

OK, I hate to disagree with you Lynne, but the OP says a "custom CMS" and this is the vb3 section, so that won't work for several reasons.

Edit: Well OK, unless it actually is using templates, in which case it's only the one reason....

But FWIW I did try out the code from the OP in a static html file and the problem seems to be that the CSRF Protection stuff checks for a security token unless the "do" field is set to "login".

[misuse]

Thanks guys/girls. I will try all this out. Never done a custom cms before.

--------------- Added [DATE]1304733953[/DATE] at [TIME]1304733953[/TIME] ---------------

Worked perfect!

<form action="http://www.asdfasf.com/forums/login.php" method="post" onsubmit="md5hash(vb_login_password,vb_login_md5pa ssword)">

<div class="form">

<input type="hidden" name="do" value="login" />

<div class="field">

<input name="vb_login_username" type="text" />

</div>

<div class="field">

<input name="vb_login_password" type="password" />

</div>

<div class="button-login">

<input type="submit" value="" class="submit-login"><br />

<a href="http://www.asdfasdf.com/forums/register.php">NOT A MEMBER YET?</a><br />

</div>

</div>

</form>


Thanks a ton!

[Lynne]

Originally Posted by kh99

OK, I hate to disagree with you Lynne, but the OP says a "custom CMS" and this is the vb3 section, so that won't work for several reasons.

I am wrong sometimes so disagree away! I just want the OP to get the right answer.