xoops forums


Just popping in
Posted on: 2012/2/10 19:45
marmotte (Show more)
Just popping in
Posts: 3
Since: 2011/7/15

Issue with $_SESSION var and TOKEN

I'm developping a module with comments enable feature.

At first, it worked fine, but now, the comments won't save due to a "No valid token found in request/session" error. It is the same with everything that needs a token like profile update.

When I output the $_POST and $_SESSION vars, I can see the token var in $_POST but there is only xoopsUserId and xoopsUserGroups in $_SESSION. It does the exact same thing when I manually enter a $_SESSION var.

What I've done wrong?
Is there a security thing that flush the $_SESSION var when something happens?

Thanks in advance.