I'm developping a module with comments enable feature.

At first, it worked fine, but now, the comments won't save due to a "No valid token found in request/session" error. It is the same with everything that needs a token like profile update.

When I output the $_POST and $_SESSION vars, I can see the token var in $_POST but there is only xoopsUserId and xoopsUserGroups in $_SESSION. It does the exact same thing when I manually enter a $_SESSION var.

What I've done wrong?
Is there a security thing that flush the $_SESSION var when something happens?


Thanks in advance.