Various Errors..

[midwestce]

I get the lovely -

Your submission could not be processed because a security token was missing or mismatched.

If this occurred unexpectedly, please inform the administrator and describe the action you performed before you received this error.

I have done the following and I have gotten this error -

1. Tried to create a thread
2. Tried to moderate/delete user's posts with the dropdown tool

Any ideas? I know I have some messed up modifications right now, but these are issues with the 'base' version of vBulletin 3.6.10.

Thanks.

P.S. I did the upgrade last night and copied the files as said. I have even tried to overwrite them via upgrading again earlier today and I've still gotten the same issues.

[Jose Amaral Rego]

Possible solution to your issue.

http://www.vbulletin.com/forum/project.php?issueid=25309

[midwestce]

So did I read that correctly, there's going to be some sort of patch?

[Jose Amaral Rego]

No, because a patch is already been posted in that 'Bug' post. You need to look at the very bottom of that posting and you can see a file has been attach. I do not know how to use that file, as I tried many method mention and still could not work it out.

[Jose Amaral Rego]

What do you know... Some that can read that file.

http://www.vbulletin.com/forum/showpost.php?p=1547416&postcount=3

[midwestce]

I have added that to the adminfunctions.php file and reuploaded via ftp and it is still not letting me create a thread or delete any posts from the drop down utility. I haven't tested anything other than these two, but it did not fix anything.

Thanks for any assistance.

[Mark.B]

The adminfunctions bug only affects sending password reminders from the admin panel, so that won't be the issue with posting threads.

(By the way, in those patch files, basically anything in red needs to be taken out and anything in green gets added in).

Anyway....to troubleshoot the problem you have.

Firstly, search in your headinclude template for this:

var SESSIONURL = "$session[sessionurl_js]";

And make sure this is immediately below:

var SECURITYTOKEN = "$bbuserinfo[securitytoken]";

Then, search in ALL templates for this:

<input type="hidden" name="s" value="$session[sessionhash]" />

And make sure that this is immediately below EVERY instance.

<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />

I realise there are loads of instances. Pay particular attention to the newpost and SHOWTHREAD templates as I suspect these are the ones where your problem lies.

[midwestce]

Thanks. So, would you suggest doing this all manually or using the find & replace function?

[Jose Amaral Rego]

Find and add to next empty line is what Mark.B

[midwestce]

Well, you could do:

find:

<input type="hidden" name="s" value="$session[sessionhash]" />


replace with:

<input type="hidden" name="s" value="$session[sessionhash]" />
<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />

Right?

[Mark.B]

You could...however, if you've run the upgrade, many of the instances will already have had the line added. Therefore you'll end up duplicating it which could cause more problems.

Best to do it individually. Start with the two I mentioned.

[midwestce]

Okay, doing what I said worked.

Now, I see what caused my issues as well -

See this thread: http://www.vbulletin.org/forum/member.php?u=5843

He stated to look for value="$session[sessionhash]"

THEN under each instance of that -

<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />

Well I did that word for word. Here's an example of one of my screwups and what it looked like doing literally what was said...

<input type="hidden" name="s" value="$session[sessionhash]"
<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />
/>

It's all due to that stupid />

Things seem to be good thus far.. I'll work on fixing my mods I have installed, etc.

[ishansoni1]

The adminfunctions bug only affects sending password reminders from the admin panel, so that won't be the issue with posting threads.

(By the way, in those patch files, basically anything in red needs to be taken out and anything in green gets added in).

Anyway....to troubleshoot the problem you have.

Firstly, search in your headinclude template for this:

var SESSIONURL = "$session[sessionurl_js]";

And make sure this is immediately below:

var SECURITYTOKEN = "$bbuserinfo[securitytoken]";

Then, search in ALL templates for this:

<input type="hidden" name="s" value="$session[sessionhash]" />

And make sure that this is immediately below EVERY instance.

<input type="hidden" name="securitytoken" value="$bbuserinfo[securitytoken]" />

I realise there are loads of instances. Pay particular attention to the newpost and SHOWTHREAD templates as I suspect these are the ones where your problem lies.

An easier way of seeing if security tokens are there for step 2 is to see if it says "Jelsoft" on the right bottom corner thing of your style. If its edited by someone else its likely it wont have security token!