03-11-2019 , 10:46 AM
I have never seen this message but this thread could be useful:
https://post4vps.com/thread-2225.html
https://post4vps.com/thread-2225.html
Quote:If you have upgraded to 1.8.16 or above, please read the following instructions carefully.
Templates requiring changes:1. Localize form tag
- error_nopermission
- header_welcomeblock_guest
- member_login
- portal_welcome_guesttext
Open each template and look for <form action="member.php" *>. They are the forms you use when logging in. The form tag will likely include other attributes, which you can ignore.
2. Add token
Add after <form action="member.php"> the following piece of code:
<input name="my_post_key" type="hidden" value="{$mybb->post_code}" />
It's that simple. Your users will now be able to login again. my_post_key input is in fact now mandatory to be sent alongside other form parameters in order to reduce potential malicious attacks.