MyBB Community Forums
[Security] Security Issue importing theme - Printable Version

+- MyBB Community Forums (https://community.mybb.com)
+-- Forum: Community Archive (https://community.mybb.com/forum-106.html)
+--- Forum: Archived Forums (https://community.mybb.com/forum-143.html)
+---- Forum: Archived Development and Support (https://community.mybb.com/forum-155.html)
+----- Forum: MyBB 1.6 (https://community.mybb.com/forum-138.html)
+------ Forum: 1.6 General Support (https://community.mybb.com/forum-127.html)
+------ Thread: [Security] Security Issue importing theme (/thread-141422.html)



Security Issue importing theme - CNR - 2013-06-22

I get the following issue when importing the attached theme.

http://gyazo.com/36f3b1b93649936f81f218b1647aa94b.png

Theme link: http://mods.mybb.com/view/mynecraft-envira-design

Attached XML as well.

What can I do to resolve this issue?

Thanks!


RE: Security Issue importing theme - User 2877 - 2013-06-22

Image is dead.


RE: Security Issue importing theme - Destroy666 - 2013-06-22

Try opening the .xml file with any text editor and changing:
{$monthnames[$prev_month['month']]}
to
{$prev_month['month']}
And:
{$monthnames[$next_month['month']]}
to:
{$next_month['month']}

If doesn't work see this thread http://community.mybb.com/thread-139498.html


RE: Security Issue importing theme - CNR - 2013-06-22

Apologies labrocca, I added the link only this time. Gyazo keeps having issues lately. And I will try those things out, Destroy666. Thank you!


RE: Security Issue importing theme - Destroy666 - 2013-06-22

Try also changing:
{$monthnames[$week_from[1]]}
To:
{$monthnames[$week_from_one]}

And:
{$type_checked[$type['tid']]}
To:
{$checked}

If still nothing, read the topic I posted, you'll need to get through the whole theme looking for disallowed variables.


RE: Security Issue importing theme - CNR - 2013-06-22

It worked this time! Thanks so much sir!