DennisTT Wrote:NightRider, if you used maatty's solution, I suggest you revert to your backed up member.php and use LeX's fix. Or else you will be open to a vulnerability where people could log you out of your account without your permission.
I totally agree. I just wanted to give him a quick solution till he has time to read and apply LeX-s fix, he was actually getting impatient, so I offered him this quick solution. You did the right thing DennisTT.
Regards
Default Templates <-- This one was edited
This template set is associated with the following themes:
* MyBB Default
Before this template set can be deleted these themes must be assigned to another template set.
NWH Templates <-- This one was edited, but it's not associated with any themes, so it won't display anywhere.
This template set is currently not associated to any themes.
It can be removed at any time.
NWH Templates <-- This one was not edited -- I changed the index_logoutlink for you, but I'll leave you the other two templates changes because I'm busy.
This template set is associated with the following themes:
* NWH
Before this template set can be deleted these themes must be assigned to another template set.
So what all do I need to change?
The following: (
Make sure you're editing the second NWH Templates set)
Admin CP --> Templates --> Modify/Delete --> *expand your template set* --> changeuserbox
Find:
<a href="member.php?action=logout&uid={$mybb->user['uid']}">{$lang->change_user}</a>
Replace with:
<a href="member.php?action=logout&uid={$mybb->user['uid']}&sid={$session->sid}">{$lang->change_user}</a>
Admin CP --> Templates --> Modify/Delete --> *expand your template set* --> header_welcomeblock_member
Find:
<a href="{$mybb->settings['bburl']}/member.php?action=logout&uid={$mybb->user['uid']}">{$lang->welcome_logout}</a>
Replace with:
<a href="{$mybb->settings['bburl']}/member.php?action=logout&uid={$mybb->user['uid']}&sid={$session->sid}">{$lang->welcome_logout}</a>
Okay I edited the two u mention... (And it was the second NWH one)
"Your user ID could not be verified to log you out. This may have been because a malicious Javascript was attempting to log you out automatically. If you intended to logout, please click the Logout button at the top menu."
SWEET, yay its working now.
It didnt work once I change that file.
Thanks!
Thank u! for your help and support another satisfied member!
Worked a treat, thanks for the nice clear instructions
For me, it seems like on every single template, of which, I have about 4, the last change in the "manual edit" was missing code.
the code it originally has was:
<a href="member.php?action=logout&uid={$mybb->user['uid']}&sid={$session->sid}">{$lang->change_user}</a>
and after I changed it to:
<a href="{$mybb->settings['bburl']}/member.php?action=logout&uid={$mybb->user['uid']}&sid={$session->sid}">{$lang->change_user}</a>
everything is working great now. Thanks all.