arrow_upward

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
myBB users beware - Authorization code mismatch!
#1
Not sure whether you've come across this, but definitely a rude awakening when I installed the latest version of myBB.

myBB 1.8.17

After a brand-new installation of the above script, and after completely setting up the Forum, when one clicks from the Admin Dashboard on "View Forum" then one should automatically be able to access the Forum as the user with Admin status.  That was the first warning sign. When that failed I tried to log in and this is the error message that came up:

Quote:Authorization code mismatch. Are you accessing this function correctly? Please go back and try again.
I then thought it had something to do with the theme, and turned the theme off and the default theme on.  That didn't make a difference either.  Then had to navigate to the myBB Community Forum in search of answers.  Just to discover the developers of the script seem to think it's completely OK to expect that one should know that there is an issue with the Authorization code mismatch. They don't have to fix their installation script.  It's up to the dumb users to figure it out for themselves and to finally find their way to this tweaking that needs to be done to the templates:

https://community.mybb.com/thread-218862.html

Shade - myBB Staff Wrote:If you have upgraded to 1.8.16 or above, please read the following instructions carefully.

Templates requiring changes:
  • error_nopermission
  • header_welcomeblock_guest
  • member_login
  • portal_welcome_guesttext

1. Localize form tag
Open each template and look for <form action="member.php" *>. They are the forms you use when logging in. The form tag will likely include other attributes, which you can ignore.

2. Add token
Add after <form action="member.php"> the following piece of code:

Code:
<input name="my_post_key" type="hidden" value="{$mybb->post_code}" />

It's that simple. Your users will now be able to login again. my_post_key input is in fact now mandatory to be sent alongside other form parameters in order to reduce potential malicious attacks.

Compare this with my effortless experience with phpBB of a couple or more months ago, what an absolute pain myBB is.  To find myBB templates is never easy.  I have to count all of the hours I've spent searching for things to fix in the Admin Dashboard.  Installing a plugin is archaic compared with scripts like phpBB and WordPress.  And also a hit and a miss affair with plenty of tweaks needed at times. Those tweaks may also differ from plugin author to plugin author.  Some of the plugins break with themes - standard of monitoring those from the myBB end is not very good.  With themes one rarely get demos and the standards are appalling - with phpBB the themes I found were almost all mobile friendly - with myBB one feels lucky to find a free mobile friendly theme.  

From my experience today .... definitely thumbs down to myBB!
Terminal
Thank you to Post4VPS and VirMach for my awesome VPS 9!  
#2
nice one frm you,
can i ask you: some plugins won't work with me suck as Multi user badge(forum rank img), i used manythings
i didn't use the latest version 1.8.7.. should i update forum to make this plugin working or what ??

Thanks to @Post4VPS & @Racknerd for Providing thier : VPS 2

#3
(07-29-2018, 09:23 PM)YOuNeS_Dz Wrote: nice one frm you,
can i ask you: some plugins won't work with me suck as Multi user badge(forum rank img), i used manythings
i didn't use the latest version 1.8.7.. should i update forum to make this plugin working or what ??
I'm not an expert, but for me with myBB I'd definitely update it to the latest version even if it means that one has to do the above fixes.  They were made to make the Forum safer. 

What you may consider, if you've been having a problem with the plugin, is to remove it first before you do the upgrade, and then to completely download it from an up to date version and reinstall it.  I'd be slightly worried though as looks as though the last build of the plugin is 2014. 
https://community.mybb.com/mods.php?action=view&pid=133

When I checked the last build I also found this cautionary note of the author that may be applicable to your situation:

Quote:Please note that this plugin may not be compatible with highly customized themes by default if these themes remove the {$post['groupimage']} or the {$groupimage} variables from the postbit or the profile templates, respectively. If the plugin does not work with your theme, you will need to manually add these variables into your templates.

The above conflict isn't only applicable to this plugin though.  To most plugins.  The more complicated or involved the theme is, the higher the possibility there will be a conflict with a plugin - or if you change the theme, the higher the possibility that it will break the plugin.

In the end though I must give the devil its due. If you spend enough hours on the problem, or discuss it at the mybb.com community forum, you will be able to figure it out eventually. It's never easy though, and it always makes me worry about how secure the script really is in the end. I'd rather go with phpBB since its community forum is much better managed and moderated, and looks as though the Admin there have much higher standards with regard to phpBB styles and extensions. Only drawback with phpBB is that it doesn't have the variety of all of the fancy bells and whistles that myBB has. When I work with phpBB I do miss some of those bells and whistles.
Terminal
Thank you to Post4VPS and VirMach for my awesome VPS 9!  
#4
(07-29-2018, 02:03 PM)deanhills Wrote: Not sure whether you've come across this, but definitely a rude awakening when I installed the latest version of myBB.

myBB 1.8.17

After a brand-new installation of the above script, and after completely setting up the Forum, when one clicks from the Admin Dashboard on "View Forum" then one should automatically be able to access the Forum as the user with Admin status.  That was the first warning sign. When that failed I tried to log in and this is the error message that came up:

I then thought it had something to do with the theme, and turned the theme off and the default theme on.  That didn't make a difference either.  Then had to navigate to the myBB Community Forum in search of answers.  Just to discover the developers of the script seem to think it's completely OK to expect that one should know that there is an issue with the Authorization code mismatch. They don't have to fix their installation script.  It's up to the dumb users to figure it out for themselves and to finally find their way to this tweaking that needs to be done to the templates:

https://community.mybb.com/thread-218862.html


Compare this with my effortless experience with phpBB of a couple or more months ago, what an absolute pain myBB is.  To find myBB templates is never easy.  I have to count all of the hours I've spent searching for things to fix in the Admin Dashboard.  Installing a plugin is archaic compared with scripts like phpBB and WordPress.  And also a hit and a miss affair with plenty of tweaks needed at times. Those tweaks may also differ from plugin author to plugin author.  Some of the plugins break with themes - standard of monitoring those from the myBB end is not very good.  With themes one rarely get demos and the standards are appalling - with phpBB the themes I found were almost all mobile friendly - with myBB one feels lucky to find a free mobile friendly theme.  

From my experience today .... definitely thumbs down to myBB!

This is why I always stick with modern forum software like Flarum/NodeBB/Discourse. They never have this kind of problem since they are built from ground up using modern tools with modernness in mind. So responsive design with mobile friendliness is there, plugins and extensions works with each other without any problem and if one doesn't work disable it with click of a button. Everything feels snappy and quick unlike MyBB here which takes me forever to load, I never had problem with the loading of modern forum like discourse which is quick and pleasing to the eyes.
No one knows what the future holds, that's why its potential is infinite
#5
@deanhills tbh with you i'm using Paid theme( OneFunky by iandrew) , but i saw 2/3 other plugins not working..
so i've to contact mybb.com or the plugin creator ?

Thanks to @Post4VPS & @Racknerd for Providing thier : VPS 2

#6
(07-30-2018, 02:19 PM)YOuNeS_Dz Wrote: @deanhills tbh with you i'm using Paid theme( OneFunky by iandrew) , but i saw 2/3 other plugins not working..
so i've to contact mybb.com or the plugin creator ?

Agreed.  Tonight I tested the DVZ Mentions Plugin with the Funky theme and I suspect it is a theme issue as there is a conflict somewhere.  What happens is when I loaded the plugin files into the plugin sub-directory all of the plugins in the myBB Admin Panel went blank.  They work, but they're not there.  I've reported it to myBB so will see what it comes up with.

Thing is, there is always a work around, but it takes so much of one's time to figure it out.  myBB is beginning to feel like a chaotic script that is not very theme friendly.
Terminal
Thank you to Post4VPS and VirMach for my awesome VPS 9!  


Possibly Related Threads…
Thread
Author
Replies
Views
Last Post
5,980
03-28-2021, 03:36 PM
Last Post: deanhills
2,391
11-29-2017, 05:06 AM
Last Post: Honey

person_pin_circle Users browsing this thread: 2 Guest(s)
Sponsors: VirMach - Host4Fun - CubeData - Evolution-Host - HostDare - Hyper Expert - Shadow Hosting - Bladenode - Hostlease - RackNerd - ReadyDedis - Limitless Hosting