I agree it's not advisable, but I was unable to figure out how to successfully create csrf tokens for forms that exist outside of my punbb directory.
1 2009-06-12 14:34
Re: Unable to confirm security token (9 replies, posted in PunBB 1.3 troubleshooting)
2 2009-06-09 18:02
Re: Unable to confirm security token (9 replies, posted in PunBB 1.3 troubleshooting)
I too was having a similar issue after converting our CMS to use PunBB's login authentication system. The simple solution is to just define the constant FORUM_SKIP_CSRF_CONFIRM before including any PunBB code. It took some digging, but I found that check included in include/common.php before verifying the CSRF token.
define("FORUM_SKIP_CSRF_CONFIRM", 1);