Samir Churin reacted to
Severt in IP.Board 3.3.x, 3.4.x Security Update
file - admin/sources/classes/member/photo.php
System - ipb 3.4.8
nginx 1.8 +php-fpm 5.4
in old version
$html = $this->registry->getClass('output')->getTemplate('profile')->photoEditor( $data, $member );
return preg_replace( '#<form(.+?)action="([^"]+?)"\s+?id=\'photoEditorForm\'#', '<form\1action="\2&secure_key=' . $this->member->form_hash . '" id=\'photoEditorForm\'', $html ); in new version
return $this->registry->getClass('output')->getTemplate('profile')->photoEditor( $data, $member );stops working loading avatar
