MyBB Community Forums

Full Version: I have two security issues with theme
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Forumdisplay

<html>
<head>
<title>{$mybb->settings['bbname']} - {$foruminfo['name']} {$google_seo_page} </title>
{$headerinclude}
{$rssdiscovery}
<script type="text/javascript">
<!--
	lang.no_new_posts = "{$lang->no_new_posts}";
	lang.click_mark_read = "{$lang->click_mark_read}";
// -->
</script>
</head>
<body>
{$header}
{$moderatedby}
{$usersbrowsing}
{$rules}
{$subforums}
{$threadslist}
{$footer}
</body>
</html>

header_welcomeblock_guest

<div id="panel">
<script type="text/javascript">
<!--
	lang.username = "{$lang->login_username}";
	lang.password = "{$lang->login_password}";
	lang.login = "{$lang->login}";
	lang.lost_password = " &mdash; <a href=\"{$mybb->settings['bburl']}/member.php?action=lostpw\">{$lang->lost_password}<\/a>";
	lang.register_url = " &mdash; <a href=\"{$mybb->settings['bburl']}/member.php?action=register\">{$lang->welcome_register}<\/a>";
        lang.remember_me = "{$lang->remember_me}";
// -->
</script>
<span style="float: right;">{$lang->welcome_current_time}</span>
		<span id="quick_login">{$lang->welcome_guest} (<a href="{$mybb->settings['bburl']}/member.php?action=login" onclick="MyBB.quickLogin(); return false;"><span style="color: white;">{$lang->welcome_login}</span></a> &mdash; <a href="{$mybb->settings['bburl']}/member.php?action=register"><span style="color: white;">{$lang->welcome_register}</span></a>)</span>
</div>

I'm using the second version of codergreen.