vBulletin Mods

The Official vBulletin Modifications Site
https://www.vbulletin.org/forum/showthread.php?t=177013

Lynne 16 Mar 2009 04:49

That query will most likely not catch modification templates or plugins where they don't have the securitytoken nor will it catch if it is a javascript problem. You can try disabling your modifications and seeing if the error goes away.

Big-K 17 Mar 2009 18:37

Hello,

I'm trying to implement an add-on (ZP Poll) that shows vb polls in a non-vb page (joomla). Everything works well until users try to vote , then they get the security token issue. This hack is not resident in vbulletin and the only line with a form is

Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Any ideas on what I can do please?

Lynne 17 Mar 2009 18:49

You should ask the author of that modification for help adding the securitytoken.

Big-K 17 Mar 2009 20:03

1 Attachment(s)
Hi Lynne,

I've been trying to get hold of the developer for days. I was hoping there is a generic way to add tokens to such non-vb pages. I'm attaching the script so you can advise on where I could add the token ?

Lynne 17 Mar 2009 20:11

I'm no CSRF expert at all. I was able to just add the line to all my custom mods and everything worked perfectly. You can try adding the securitytoken right after the form line you posted above and see if that works.

ndL 09 May 2009 14:06

i have problem with a theme header ( i think so ) quick search (java one) doesnt work with this theme:

where to add special lines to make it work? here is the script


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.


Lynne 09 May 2009 15:58

Quote:

Originally Posted by ndL (Post 1807462)
i have problem with a theme header ( i think so ) quick search (java one) doesnt work with this theme:

where to add special lines to make it work? here is the script

If you think it's a problem with a particular mod, go read the mod thread and see if anyone posted the fix in there. There was also a discussion in this thread about fixing javascript (not java, that is very different) problems. Did you read the thread at all?

mokujin 09 May 2009 21:40

Hi Lynne, do you know how to make the Default var?
Thank you

Lynne 10 May 2009 03:43

Quote:

Originally Posted by mokujin (Post 1807691)
Hi Lynne, do you know how to make the Default var?
Thank you

I don't understand what you mean, sorry.

mokujin 10 May 2009 17:37

Quote:

Originally Posted by Lynne (Post 1807821)
I don't understand what you mean, sorry.

Hi Lynne,
I mean how to make the AJAX call a script without click a button (or a link) when a user just loaded the page.
For example: I have Installed AJAX Advanced Forum Statistic.
I browse the index page, that Mod loads the Statistics using AJAX for the default.

I hope you understand what I mean.

Lynne 10 May 2009 17:44

Quote:

Originally Posted by mokujin (Post 1808143)
Hi Lynne,
I mean how to make the AJAX call a script without click a button (or a link) when a user just loaded the page.
For example: I have Installed AJAX Advanced Forum Statistic.
I browse the index page, that Mod loads the Statistics using AJAX for the default.

I hope you understand what I mean.

How is that related to CSRF Protection?

I'm not an ajax expert at all, so I can't really answer questions regarding ajax.

Eclyps19 20 Jun 2009 20:39

god i'm so confused

if I do a search in templates for that line, but it comes back with 100+ templates. Am I expected to go through every one and check for that securitytoken line?

The only thing that's not working for me is my search

Lynne 20 Jun 2009 21:43

Quote:

Originally Posted by Eclyps19 (Post 1833539)
god i'm so confused

if I do a search in templates for that line, but it comes back with 100+ templates. Am I expected to go through every one and check for that securitytoken line?

The only thing that's not working for me is my search

Then try just adding the line in the templates that look like they are search related. If it's a specific page that isn't working, you can find the list of templates on the page by going into debug mode and looking at the bottom of the page. Or, you can just do this - - vboptions > General Settings > Add Template Name in HTML Comments > set to Yes . Then go back to your page and view the source code and you will see the name of the template called around your part of the code.

Eclyps19 21 Jun 2009 03:42

that line is in the templates related to the search portion. Are there any other suggestions?

yahya komeet 27 Sep 2009 06:42

it is Useful information Thank you


All times are GMT. The time now is 02:35.

Powered by vBulletin® Version 3.8.14
Copyright © 2021, MH Sub I, LLC dba vBulletin. All Rights Reserved. vBulletin® is a registered trademark of MH Sub I, LLC
Copyright ©2001 - , vbulletin.org. All rights reserved.