MyBB Community Forums

Full Version: known security issues in 2 of my templates
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Im hoping someone could tell me what the security issues are with these two templates and how to fix them.

usermap_pinimgs_bit-
<option value="{$pinimg['file']}"{$selected_pinimg[$pinimg['file']]}>{$pinimg['name']}</option>

usermap_places_bit-
<option value="{$places['pid']}"{$selected_place[$places['pid']]}>{$places['name']}</option>

any help would be great, thanks.
Are you using any plugin called usermap or something similar?
(2013-01-22, 04:28 PM)kamz89 Wrote: [ -> ]Are you using any plugin called usermap or something similar?

i am yes. its a plugin that allows members to mark their location on a map.
Somehow I have a feeling it relates to the nested arrays. That's all I see that is not typical.
Yup, it is this code.

{$selected_pinimg[$pinimg['file']]}

The template won't save with those in unless you edit direct in the database.
(2013-01-23, 05:52 AM)Leefish Wrote: [ -> ]Yup, it is this code.

{$selected_pinimg[$pinimg['file']]}

The template won't save with those in unless you edit direct in the database.

ah ok. well is it that serious or should i be ok?
Sarge I think it will just refuse to save. There isn't any override afaik.
(2013-01-23, 01:03 PM)Wildcard Wrote: [ -> ]Sarge I think it will just refuse to save. There isn't any override afaik.

i just meant if i leave it as it is if the security hole is a huge problem.