Invalid Security Token Error on Mark Forums Read for vBulletin 4.2.5

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Stratis
    New Member
    • Jan 2010
    • 10
    • 4.2.x

    Invalid Security Token Error on Mark Forums Read for vBulletin 4.2.5

    Hi I have the security problem when try to mark forum as read, only in that one that is in "Forum Actions" the other one that is before "What's Going On?" works fine.
    Actually if I point at the one that does not work I do not see the hash code. This happened updating in my dev site 4.2.0 to 4.2.5.
    Any help please? I have read lots of same problems in vborg but they was for v3.8 so code search did not help.



  • Mark.B
    vBulletin Support
    • Feb 2004
    • 24286
    • 6.0.X

    #2
    You will need to revert the navbar template.
    MARK.B
    vBulletin Support
    ------------
    My Unofficial vBulletin 6.0.0 Demo: https://www.talknewsuk.com
    My Unofficial vBulletin Cloud Demo: https://www.adminammo.com

    Comment

    • Stratis
      New Member
      • Jan 2010
      • 10
      • 4.2.x

      #3
      Just reverted, same problem, even copied navbar template from my working forum 4.2.0 and paste it to dev 4,2,5. Same problem.
      Thanks for the answer, from some how that place does not fetch the security code.
      In the navigation manager the link is the same that other forum has:
      forumdisplay.php?{session.sessionurl}do=markread&markreadhash={userinfo.securitytoken}

      Some thing else?

      Comment

      • Wayne Luke
        vBulletin Technical Support Lead
        • Aug 2000
        • 73981

        #4
        The template from your 4.2.0 site will most likely not work in a 4.2.5 environment.

        Make sure that you're using a minimum version of PHP 5.6.0. But not PHP 7.2.X.
        Translations provided by Google.

        Wayne Luke
        The Rabid Badger - a vBulletin Cloud demonstration site.
        vBulletin 5 API

        Comment

        • Stratis
          New Member
          • Jan 2010
          • 10
          • 4.2.x

          #5
          - I test in PHP 5.6.32 and 7.0.26
          - I reverted navbar, even header and headinclude, only the "Mark Forum Read" above the "What's Going On?" works (it fetches the security token code)
          Problem is in all skins + default vb skin.
          May navigation manager have an issue? and can not fetch the code, when I point mouse over that link I see:
          FORUM-URL/forumdisplay.php?do=markread&markreadhash=(NO CODE HERE)
          I might put some new other skin to see what will happen.

          Still searching
          Thank you.

          EDIT:
          With new skin same problem.
          Last edited by Stratis; Tue 9 Jan '18, 1:15am.

          Comment

          • Mark.B
            vBulletin Support
            • Feb 2004
            • 24286
            • 6.0.X

            #6
            The entry in the navbar manager should be this:

            Code:
            forumdisplay.php?{session.sessionurl}do=markread&markreadhash={bbuserinfo.securitytoken}
            MARK.B
            vBulletin Support
            ------------
            My Unofficial vBulletin 6.0.0 Demo: https://www.talknewsuk.com
            My Unofficial vBulletin Cloud Demo: https://www.adminammo.com

            Comment

            • Stratis
              New Member
              • Jan 2010
              • 10
              • 4.2.x

              #7
              Originally posted by Mark.B
              The entry in the navbar manager should be this:

              Code:
              forumdisplay.php?{session.sessionurl}do=markread&markreadhash={bbuserinfo.securitytoken}
              YES that's it THANK you very very much.

              Now, what we have here...

              vb4.2.0 (it has this and it works fine) I never touch it.
              forumdisplay.php?{session.sessionurl}do=markread&markreadhash={userinfo.securitytoken}

              vb4.2.5 After update in my dev site (it is a duplicate of 4.2.0) this did not change as the fix you give)
              forumdisplay.php?{session.sessionurl}do=markread&markreadhash={userinfo.securitytoken}

              How does this come up? "bbuserinfo" must change "userinfo" and in other places?

              forumdisplay.php?{session.sessionurl}do=markread&markreadhash={bbuserinfo.securitytoken}
              Why did not change with the update? or is it wrong in vb4.2.0 the "userinfo" (either that it works)

              Thanks

              Comment

              • Mark.B
                vBulletin Support
                • Feb 2004
                • 24286
                • 6.0.X

                #8
                I believe this changed in 4.2.1 or 4.2.2, it wasn't possible to update navbar manager entries because there is no reliable way of identifying which one to change. Not every customer keeps the default set up and even if they do the ID numbers aren't always the same. Where the link is used in templates, however, it was updated.

                The same thing happens in vB5 today, if there are navbar changes we update new installs but generally don't change what already exists.
                MARK.B
                vBulletin Support
                ------------
                My Unofficial vBulletin 6.0.0 Demo: https://www.talknewsuk.com
                My Unofficial vBulletin Cloud Demo: https://www.adminammo.com

                Comment

                • Stratis
                  New Member
                  • Jan 2010
                  • 10
                  • 4.2.x

                  #9
                  So what that means? I made the question to my previous message, do we know if there are critical places that we must change there to?
                  Example: (For the reset password email.)
                  Does this
                  Username: $userinfo[username]
                  must change to this ?
                  Username: $bbuserinfo[username]

                  or any where else? Thanks @Mark.B

                  Comment

                  • Mark.B
                    vBulletin Support
                    • Feb 2004
                    • 24286
                    • 6.0.X

                    #10
                    Nothing else should be changed. It was only that specific link that changed.

                    Please don't alter anything else as you will break stuff.
                    MARK.B
                    vBulletin Support
                    ------------
                    My Unofficial vBulletin 6.0.0 Demo: https://www.talknewsuk.com
                    My Unofficial vBulletin Cloud Demo: https://www.adminammo.com

                    Comment

                    widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
                    Working...