MyBB Community Forums

Full Version: Atros2 Template security errors
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
I have these security errors, any help would be appreciated, I have up-graded to the newest version of mybb:

Atros2 Templates /calendar - error

<html>
<head>
<title>{$mybb->settings['bbname']} - {$lang->calendar}</title>
{$headerinclude}
</head>
<body>
{$header}
<table border="0" cellspacing="{$theme['borderwidth']}" cellpadding="{$theme['tablespace']}" class="tborder">
<thead>
<tr>
<td class="thead" colspan="8">
<div class="float_right">
<a href="{$prev_link}">&laquo; {$monthnames[$prev_month['month']]} {$prev_month['year']}</a> | <a href="{$next_link}">{$monthnames[$next_month['month']]} {$next_month['year']} &raquo;</a>
</div>
<div><strong>{$monthnames[$month]} {$year}</strong></div>

"<a href="{$prev_link}">&laquo; this part: laquo
-------------------------

Atros2 Templates calendar_weekview error

<html>
<head>
<title>{$mybb->settings['bbname']} - {$lang->calendar}</title>
{$headerinclude}
</head>
<body>
{$header}
<table border="0" cellspacing="0" cellpadding="0">
<tr>
<td width="100%">
<table border="0" cellspacing="{$theme['borderwidth']}" cellpadding="{$theme['tablespace']}" class="tborder">
<thead>
<tr>
<td class="thead" colspan="2">
<div class="float_right">
<a href="{$prev_link}">&laquo;

<a href="{$prev_link}">&laquo; this part: laquo
-------------------------------

Atros2 Templates warnings_warn_type error

A potential security issue was found in the template, not sure where though, nothing was highlited:

<dt><label style="display: block;"><input type="radio" name="type" value="{$type['tid']}" {$type_checked[$type['tid']]} class="types_check" onclick="checkType();" style="vertical-align: middle;" /> <strong>{$type['title']}</strong> $points</label></dt>
<dd style="margin-top: 4px;" id="type_{$type['tid']}" class="types">
<div class="smalltext">{$lang->new_warning_level}</div>
<div class="tborder" style="width: 150px; float: left; margin: 0; padding: 1px;">
<div class="trow1" style="width: {$current_level}%; float: left; ">&nbsp;</div>
<div class="trow2" style="width: {$level_diff}%; float: left;">&nbsp;</div>
</div>
<div style="padding-left: 10px; font-weight: bold; float: left;">{$new_warning_level}%</div><br style="clear: left;" />
{$result}
</dd>

possably:

<div class="trow1" style="width: {$current_level}%; float: left; ">&nbsp;</div>
<div class="trow2" style="width: {$level_diff}%; float: left;">&nbsp;</div> - this part on both lines: &nbsp
Apply changes mentioned by me in this topic: http://community.mybb.com/thread-141422.html

EDIT: @down, that's why I said changes not change. The 3rd one is in my 2nd post in that topic... At least look carefully if you receive support..
that took care of the first 2, but I still have the 3rd one (warnings_warn_type)
^ replace {$type_checked[$type['tid']]} with {$checked}