Hi,

PS: I ran for the second time during the last weeks into the trap of getting the message "No Authorization" (only this one sentence) when I wanted to use the preview-button. The message was not formatted in the forums template so I think, it's a message from the server itself and not from the forum software.

This message comes from the software. There are some calls of

die('No authorisation!');

• posting.inc.php (4 hits)
  
• register.inc.php (1 hit)

(as well as in english.lang).

The critical part seems the check for csrf_token or the session, i.e. (posting.inc.php):

case 'posting_submitted': // is used for preview, too
 if (!isset($_POST['csrf_token']) || $_POST['csrf_token'] !== $_SESSION['csrf_token'])
  die('No authorisation!');

/Micha