I've encountered a major issue on three managed sites. This past week, I updated to VirtueMart version 4.6.0 11214.
The update went well until I saw users having trouble completing their orders. I ran a test, and the problem is that the error message "Invalid Token, in view=cart task=updatecart" appears. It's not possible to proceed with the order.
Regards
Joomla! 5.4.0
PHP version 8.4.5
I've now solved the problem by reloading VirtueMart 4.4.10 11120
Let me know if the problem is resolved in version 4.6.0.
Having recently done the same upgrade to VM4.6.2.11221, on J5.4.0, we experience the same alert, thought it was something i did wrong, you also can't edit or remove items from the cart system, so reverting to older virtuemart version, won't affect, other elements/plugins?or is there already a fix, thanks
Yeh I wrote that into the news https://virtuemart.net/news/we-put-on-the-helmet-important-security-release-4-6-0 and here the tutorial https://docs.virtuemart.net/tutorials/templating-layouts/fix-missing-token-in-checkout-virtuemart-4-6-x
But wait for the next release
Quote from: Milbo on November 10, 2025, 18:24:20 PMYeh I wrote that into the news https://virtuemart.net/news/we-put-on-the-helmet-important-security-release-4-6-0 and here the tutorial https://docs.virtuemart.net/tutorials/templating-layouts/fix-missing-token-in-checkout-virtuemart-4-6-x
But wait for the next release
Should we upload the token, after upgrade of VM4.6.2, because this version, the cart is not working, we had to revert again to the VM4.4.10, with prompt to upgrade Virtuemart AIO, administrator component to 4.6.2, very confusing situation, what exact should we do
From what I understand the token fix is included in VM 4.6.4.
So it says in the news article about 4.6.4:
https://virtuemart.net/news/new-opc-needed-some-fixes-auto-token-system
Quote from: iWim on December 08, 2025, 08:52:09 AMFrom what I understand the token fix is included in VM 4.6.4.
So it says in the news article about 4.6.4:
https://virtuemart.net/news/new-opc-needed-some-fixes-auto-token-system
Appreciate the input, guess one has to implement this, upgrade to VM 4.6.4, have you any review, confirming this? I mean, i really thought, i did something wrong, after upgrade to VM 4.6.0, then to VM 4.6.2, then via this forum, had to roll back to our current VM 4.4.10, which works, issue is the constant prompt, to update the Virtuemart AIO, administrator component, to Virtuemart 4.6.2, from current version of 4.4.10, very confusing for me, should i, update this first, then upgrade to VM 4.6.4? have uploaded the token & VM 4.6.2 version, just too scared to upload it, will look forward to response
Quote from: iWim on December 08, 2025, 08:52:09 AMFrom what I understand the token fix is included in VM 4.6.4.
So it says in the news article about 4.6.4:
https://virtuemart.net/news/new-opc-needed-some-fixes-auto-token-system
Cheers, have upgraded, also activated the included token, i guess we have a J5.4.1 with VM4.6.4