Advertisement:

Author Topic: [2.0.15] Core theme quick login issue  (Read 1410 times)

Offline digger

  • Sr. Member
  • ****
  • Posts: 733
  • Gender: Male
    • realdigger on GitHub
    • SMF Russian Community
[2.0.15] Core theme quick login issue
« on: December 25, 2017, 10:54:40 AM »
Core theme not patched for latest SMF security fixes.
In index.tempate.php file
Code: [Select]
<input type="hidden" name="hash_passwrd" value="" />should be replaced with
Code: [Select]
<input type="hidden" name="hash_passwrd" value="" /><input type="hidden" name="', $context['session_var'], '" value="', $context['session_id'], '" />

Offline Sir Osis of Liver

  • SMF Hero
  • ******
  • Posts: 8,239
  • 'Tis the gift to be simple (duh)
Re: [2.0.15] Core theme quick login issue
« Reply #1 on: December 25, 2017, 12:16:48 PM »
It's also missing in 2.0.15 large upgrade package.

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 57,083
  • Gender: Male
    • Kindred-999 on GitHub
Re: [2.0.15] Core theme quick login issue
« Reply #2 on: December 25, 2017, 12:30:56 PM »
Core is not really relevant or supported any more, either....
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline Sir Osis of Liver

  • SMF Hero
  • ******
  • Posts: 8,239
  • 'Tis the gift to be simple (duh)
Re: [2.0.15] Core theme quick login issue
« Reply #3 on: December 25, 2017, 12:39:11 PM »
I've worked on several forums that are currently using Core, or customizations thereof.  If it's no longer being supported, it should be removed.  This was a minor fix of a well known problem, there's really no excuse that it wasn't applied to Core.


Offline lurkalot

  • Sophist Member
  • *****
  • Posts: 1,134
  • Gender: Male
  • Tinyportal Support
    • guitaristguild on Facebook
    • Tinyportal on GitHub
    • @GuitaristGuild on Twitter
    • Guitarist Guild
Re: [2.0.15] Core theme quick login issue
« Reply #4 on: December 25, 2017, 12:42:15 PM »
Core is not really relevant or supported any more, either....

Was mentioned back when 2.0.14 was released, https://www.simplemachines.org/community/index.php?topic=555856.msg3939909#msg3939909

Now wondering why it's still packaged with SMF, if it doesn't work and goes unsupported.

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 69,274
    • StoryBB/StoryBB on GitHub
Re: [2.0.15] Core theme quick login issue
« Reply #5 on: December 25, 2017, 01:46:23 PM »
There were a number of places that were broken by the security patch. The mod I submitted recently should help though (nudge nudge)
Don’t try to tell me that some power can corrupt a person. You haven’t had enough to know what it’s like.

No good deed goes unpunished / No act of charity goes unresented.