
"No authorisation" -> message gone (Bugs)
Hi,
Sometimes, I have the same problem and I believe, the csrf_token is wrong or missing.
I changed the code in my forum to:
case 'posting_submitted': if ($settings['forum_readonly'] == 1) { $subnav_link = array( 'mode' => 'index', 'name' => 'forum_index_link', 'title' => 'forum_index_link_title' ); $smarty->assign("subnav_link", $subnav_link); $smarty->assign('no_authorisation', 'no_auth_readonly'); $smarty->assign('subtemplate', 'posting.inc.tpl'); } elseif ($settings['entries_by_users_only'] != 0 && empty($_SESSION[$settings['session_prefix'] . 'user_name']) || !isset($_POST['csrf_token']) || $_POST['csrf_token'] != $_SESSION['csrf_token']) { if (isset($_POST['text'])) { $smarty->assign('no_authorisation', 'no_auth_session_expired'); $smarty->assign('text', htmlspecialchars($_POST['text'])); } else { $smarty->assign('no_authorisation', 'no_auth_post_reg_users'); } $smarty->assign('subtemplate', 'posting.inc.tpl'); }
Maybe, this yields a better error message.
/Micha
--
applied-geodesy.org - OpenSource Least-Squares Adjustment Software for Geodetic Sciences