Hello
I'm getting the following error message from PunBB after including the familiar two lines in a script, after the user has already been authenticated by PunBB and received the forum_cookie_baf83f cookie:
Unable to confirm security token. A likely cause for this is that some time passed between when you first entered the page and when you submitted a form or clicked a link. If that is the case and you would like to continue with your action, please click the Confirm button. Otherwise, you should click the Cancel button to return to where you were.
This is actually a very simple play, with the following characters:
/blog/index.php
/blog/action.php
/punbb/login.php
A picture being worth a thousand words, here's the plan:
http://img838.imageshack.us/img838/8666 … nlogin.png
In other words, /blog/index.php uses PunBB's code to check if the user is logged on: If not, it calls /punbb/login.php, which, once the use is logged on, redirects the user back to /blog/index.php. So far, so good.
Next, /blog/index.php sees that the user is logged on, and displays a form with a single button "Subscribe/Unsubscribe"; The form calls /blog/action.php which includes just the two lines from PunBB:
define('FORUM_ROOT', '/var/www/nginx-default/punbb/');
require FORUM_ROOT.'include/common.php';Here's the full code of index.php and action.php.
As you can see in the following HTTP log, when the user clicks on the Subscribe/Unsubscribe button to call action.php, for some reason, PunBB isn't happy and sends another cookie with Set-Cookie:
Does someone more experienced with web applications have an idea what the problem could be?
Thank you for any hint.
Fancy Tracker add simple tracker for your forum.
Need any jquery-1.3-provided extensions for work — for example this http://forum.lluga.net/jquery.tar.gz
fancy_tracker.tar.gz — версия 0.8.18
Hello
This extension let users to hide their online status. Features:
-configurable group assign
-configurable flood protection* (per group)
-users can set their state in header (next to your username)
-hidden users can't post
-hidden moderators and administrators can post always
-hidden user can see himself on online list
-moderators and administrators can see all hidden users on online list (grayed/css)
* - flood protection is for unable users to be hidden all the time, and show just for couple seconds to post.
Version 1.0
hide_online_1.0.zip
Hello
This extension let moderators to set users group. It is configurable in admin' group panel.
Now you don't need to assign someone as admin to let him change users group. You can even set which groups can he change.
You need two steps to configure it.
1. Set "Allow moderators to set users group."
Because moderator will be able to change group only in user profile, you need to set "Allow moderators to edit user profiles." too**.
2. Assign (at least two) groups which you want to be settable by moderator - "Moderator can set this group."
(moderators will be able to change from/to group which are selected here ONLY)
** - Because I found a bug in users.php, I didn't add this feature to that place yet.
Version 1.0
moderator_group_set_1.0.zip
Hi all!
I use "announcement" to display ads but I would to find something to hide it for logged users.
Is there a way to hide "announcement" for those?
Thanks!
Hi !
Many people using plugin just for adding new Bbcodes like [video] or [mp3], can't we add a PunBB feature that add new Bbcode. I think I saw that in PhpBB but I'm not sure.
What do you think about?
Hello every one. I'm trying to make a custom page. But i don't get it how to. I want create .php file, but i don't know how to integrate header, announce, statistics and footer.
I mean:
1. Header
2. Announce
3. My Text
4. Statistics
5. Footer
Sorry for bad english.
Hello
If I understood how things work, from a different application, once the user has logged on using PunBB's authentication code, the browser received a cookie that matches the session ID that was created for him, and $_SESSION[] contains information put there by PunBB.
I need to read "username" for the current user, but looping through the array returns nothing:
foreach ($_SESSION as $key => $value){
print sprintf("%s = %s<p>\n",$key,$value);
}Do I really need to include this whole thing just to read session information for a user who has already logged on?
define('FORUM_ROOT', '/var/www/punbb/');
require FORUM_ROOT . 'include/common.php';
$forum_page['redirect_url'] = $post_info['real_link'];
$forum_page['form_action'] = forum_link($forum_url['login']);
$forum_page['hidden_fields'] = array(
'form_sent' => '<input type="hidden" name="form_sent" value="1" />',
'redirect_url' => '<input type="hidden" name="redirect_url" value="'.forum_htmlencode($forum_page['redirect_url']).'" />',
'csrf_token' => '<input type="hidden" name="csrf_token" value="'.generate_form_token($forum_page['form_action']).'" />'
);Thank you.
I was thinking about adding my extensions to the Extension list on Wiki page, and well... I ended up reworking the page "a little bit"
So I wanted to ask, whether you think it's good to continue this way (= ordering extensions by maxtested forum version) or stick with the old chaotic way ![]()
I think when these changes are completed, you can easily just come, see the extensions and tell apart active ones and old (maybe buggy) ones.
If you agree with me, I could use some help with that. Just check the maxtestedversion and try to obey rules (= alphabetic order, no link to author's profile at forum (guys, you don't need to boost your ego like that! Only thing that's coming from that is mess when you want to edit that table), link to extension topic, and description). Download link should be only at the topic so you don't have to search X pages for changing link when publishing new version of extension.
//Wasn't sure to which forum should I send this topic, so if it's wrong, please move it ![]()
Edit: Changes completed (now only thing that rest is adding extensions which weren't published at Wiki
)
In signature you get error msg on [ code ][ quote ][ list ] BB codes, but this error doesn't exist in lang files. There's only $lang_profile['Signature quote/code'] one.
parser.php, line 60
if (preg_match('#\[quote(=("|"|\'|)(.*)\\1)?\]|\[/quote\]|\[code\]|\[/code\]|\[list(=([1a\*]))?\]|\[/list\]#i', $text))
$errors[] = $lang_profile['Signature quote/code/list'];BTW why are these tags disallowed at all? I'm sure some people would like use these tags in signatures. ![]()