[Rayden]

Hi,

I am getting the error below whenever I tried to change any user's User Level to either "Admin" or "Normal". Anyone has any idea why?

"Invalid token (hack attempt) or timeout. Timeout is 5 minutes. Go back, refresh that page, and try again."

[rajdash]

I get the same thing in beta 9.8. I tried giving a friend a bump from normal to admin. I gave up and created a new account for him with admin privileges from the beginning.

[AshDigg]

Is this a new install or an upgrade?

[thuggster]

i did fresh install and have the same isseu

[rajdash]

yeah, fresh install of 9.8 on 2 sites

[Rayden]

Originally Posted by AshDigg

Is this a new install or an upgrade?

I think I have problems with both upgrade and fresh.

[ZeroHoursOfSleep]

We experienced the exact error when attempting to delete an account.

We had upgraded from 9.7 to 9.8

[khun]

I have the same problem...

Guys there was also a serious problem and i have solved it. Please also everyone check this out http://forums.pligg.com/bug-report/8...g-listing.html

[khun]

Hmm... It seems when we click and edit a user token from $_GET is empty. I am still on that and will post here as soon as i got something

[khun]

Good news: I found the problem and fixed...

Edit admin_users.php and find

PHP Code:

        if ($_GET["mode"] == "edit"){ // edit user
            // code to prevent CSRF
                // doesn't matter if a token exists. if we're viewing this page, just
                // create a new one or replace the existing.
                $_SESSION['token_admin_users_edit'] = md5(uniqid(rand(), TRUE));
                $_SESSION['token_time_admin_users_edit'] = time();
                $main_smarty->assign('token_admin_users_edit', $_SESSION['token_admin_users_edit']);
            // code to prevent CSRF 


and change:

PHP Code:

            $main_smarty->assign('token_admin_users_edit', $_SESSION['token_admin_users_edit']); 


to

PHP Code:

            $smarty->assign('token_admin_users_edit', $_SESSION['token_admin_users_edit']); 


Here you go..!