XF 1.1 Style redirect without confirmation

[x7iBiT]

I have some like this in a subdomain for redirect to a mobile style:

<?php
header("Location: http://mydomain.com/misc/style?style_id=2");
?>

Is there any way to skip the confirmation?

Please confirm that you would like to change to the following style:

I see a _xfToken in the URL when I confirm:

style?style_id=2&_xfToken=10073%2C1337130528%2C85abed1d474727a497a0f2a8031da541f92496b9

Has this token an expiration date?
I can use it in the php code of above?


PD: Sorry, my english sucks

 

[Jake Bunce]

The token changes. This is to prevent exploits that would change the user's style without their consent.

The check can be disabled with an addon. You can post a request here:

http://xenforo.com/community/forums/resource-and-add-on-requests.68/

 

[x7iBiT]

The token changes. This is to prevent exploits that would change the user's style without their consent.

Yes, I noticed that the token changes every time. Hence my question: has token expiration date? Can I use it indefinitely in time?

 

[Jake Bunce]

Hence my question: has token expiration date? Can I use it indefinitely in time?

No you can't. That would defeat the purpose which is CSRF protection.