Customizing SMF > SMF Coding Discussion

BUG : Can't stop Theme Selection

(1/1)

jack:
I've found that even when you have 'Allow members to select their own themes.' turned off, a user can still flip between themes by simply appending '&theme=<number or name>' to the end of their URL.

If this has been posted before, sorry but I couldn't find it while searching through.

[Unknown]:
Are you sure you're doing this with an unprivileged account?

There is code in the theme loading section that disallows exactly that - and, for example, the default theme is disabled here:

http://www.simplemachines.org/community/index.php?theme=1

If you are an administrator, it will always work.

-[Unknown]

jack:
Yup, I created a new account specifically to test that...

There again, I was in a 'non forum default' theme when I logged out & logged in as the new user. As the new user, I was able to change it to a third theme then back to my forum default.  Is it maybe based on Cookies somewhere?

jack:
I've even cleared my cookies too, Beta 5p is definatley letting an unprivileged user change themes.

I;ve just checked in the profile screen, and no option is listed there (I'm not above making a dumb mistake ;))

[Unknown]:
 ! Disallowing theme selection did plum didley.

-[Unknown]

Navigation

[0] Message Index

Go to full version