Advertisement:

Author Topic: [2.0.15] Core theme quick login issue  (Read 945 times)

Offline digger

  • Sr. Member
  • ****
  • Posts: 723
  • Gender: Male
    • realdigger on GitHub
    • SMF Russian Community
[2.0.15] Core theme quick login issue
« on: December 25, 2017, 10:54:40 AM »
Core theme not patched for latest SMF security fixes.
In index.tempate.php file
Code: [Select]
<input type="hidden" name="hash_passwrd" value="" />should be replaced with
Code: [Select]
<input type="hidden" name="hash_passwrd" value="" /><input type="hidden" name="', $context['session_var'], '" value="', $context['session_id'], '" />

Offline Sir Osis of Liver

  • SMF Hero
  • ******
  • Posts: 7,600
  • There's someone in my head but it's not me.
Re: [2.0.15] Core theme quick login issue
« Reply #1 on: December 25, 2017, 12:16:48 PM »
It's also missing in 2.0.15 large upgrade package.

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 55,849
  • Gender: Male
    • Kindred-999 on GitHub
Re: [2.0.15] Core theme quick login issue
« Reply #2 on: December 25, 2017, 12:30:56 PM »
Core is not really relevant or supported any more, either....
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline Sir Osis of Liver

  • SMF Hero
  • ******
  • Posts: 7,600
  • There's someone in my head but it's not me.
Re: [2.0.15] Core theme quick login issue
« Reply #3 on: December 25, 2017, 12:39:11 PM »
I've worked on several forums that are currently using Core, or customizations thereof.  If it's no longer being supported, it should be removed.  This was a minor fix of a well known problem, there's really no excuse that it wasn't applied to Core.


Offline lurkalot

  • Sophist Member
  • *****
  • Posts: 1,057
  • Gender: Male
  • Tinyportal Support
    • guitaristguild on Facebook
    • Tinyportal on GitHub
    • @GuitaristGuild on Twitter
    • Guitarist Guild
Re: [2.0.15] Core theme quick login issue
« Reply #4 on: December 25, 2017, 12:42:15 PM »
Core is not really relevant or supported any more, either....

Was mentioned back when 2.0.14 was released, https://www.simplemachines.org/community/index.php?topic=555856.msg3939909#msg3939909

Now wondering why it's still packaged with SMF, if it doesn't work and goes unsupported.

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 68,361
    • Arantor on GitHub
Re: [2.0.15] Core theme quick login issue
« Reply #5 on: December 25, 2017, 01:46:23 PM »
There were a number of places that were broken by the security patch. The mod I submitted recently should help though (nudge nudge)
To assume is to hope that those who came before had the presence of mind and capacity to implement the dreams of those who would come after.

You either die a hero or live long enough to see yourself become the villain. It seems you have chosen which, and now I must do the same.