MyBB Community Forums

Unable to use Additional CSS in AdminCP.... verify that $_POST|$_GET|$_REQUEST arrays can receive values from a TEXTAREA form element, especially when containing CSS definitions which may include curly braces and comments.

Works fine on another Dev's FreeBSD box... and we suspect it doesn't on our production Gentoo server due to hardened patches. Not insane enough to disable and rebuild to find out for sure though.

PHP environment info:

# emerge -vp dev-lang/php
[ebuild R ] dev-lang/php-4.4.4-r8 [4.4.4-r8] USE="apache apache2 bzip2 crypt expat ftp gd hardenedphp mysql nls pcre pic* readline session ssl unicode xml xmlrpc zlib (-adabas) -bcmath -berkdb (-birdstep) -calendar -cdb -cgi -cjk -cli* -concurrentmodphp -ctype -curl -db2 -dbase (-dbmaker) -dbx -debug -discard-path -doc (-empress) (-empress-bcs) (-esoob) -exif -fastbuild (-fdftk) (-filepro) -firebird -flatfile -force-cgi-redirect (-frontbase) -gd-external -gdbm -gmp -hyperwave-api -iconv -imap (-informix) -inifile -interbase -iodbc -ipv6* -java-external -java-internal -kerberos -ldap -libedit -mcal -mcve -memlimit -mhash -ming -mnogosearch -msql -mssql -ncurses* -oci8 (-oci8-instant-client) -odbc -oracle7 -overload -ovrimos -pcntl (-pfpro) -posix -postgres -recode -sapdb -sharedext -sharedmem -snmp -sockets (-solid) -spell* -sqlite (-sybase) (-sybase-ct) -sysvipc -threads -tokenizer -truetype -wddx -xpm -xsl -yaz -zip" 21 kB

# euse -i hardenedphp
[+ C ] hardenedphp - include the hardened php security patch for the php group of ebuilds

Works fine for everyone else I know including myself. Moving to general support.

I've got Hardened PHP running on this server here and it all works fine.

It depends on your configuration of PHP.