2
I think you have to use the name XOOPS_TOKEN_REQUEST:
['xoopsSecurity']->createToken() ?>'>
Then the check would be:
if (!$GLOBALS['xoopsSecurity']->check()) {
redirect_header(XOOPS_URL, 3, implode('
', $GLOBALS['xoopsSecurity']->getErrors()));
}
If that doesn't work, view the source for the generated HTML page, and verify that it contains something like:
<input type='hidden' name='XOOPS_TOKEN_REQUEST' id='XOOPS_TOKEN_REQUEST' value='db08170597299ee18a2b1267a93e25a2' />