Just received a message from my web host about timthumb.php vulnerability. Is there something that Habitat users need to do to patch or update our sites? I am a definite newbie when it comes to messing with the base code, btw.
Timthumb Vulnerability on Habitat
14 posts from 6 voices- Started 1 year ago by martybuckenmeyer
- Latest reply from Dude
- This topic is not a support question
-
Posted 1 year ago #
-
Hi,
are you running the latest version of the theme? Kriesi released a timthumb update just a few days ago. The update can be downloaded on themeforest.Posted 1 year ago # -
I purchased in May 2011; I think I'm running version 1.1.1. To update, do I just download the 'current' theme from Themeforest and replace the theme on Wordpress? Will I have to rebuild the site again?
Posted 1 year ago # -
When you download the updated version there's a version.rtf file which tells you what has been updated so you can replace the files in question. However, you can just replace the entire theme without your settings being lost since they're stored in the database.. which remains untouched.
Posted 1 year ago # -
Will I have to "purchase" the theme again?
Posted 1 year ago # -
No, all updates are free.
Posted 1 year ago # -
Well, for the time-being then, I guess this is an issue for me to figure out with Themeforest, because I don't see any option on that site to download an 'update.' My only options appear to be downloading the old theme or purchasing the theme. There is no 'update' indicated anywhere...Can you verify that there is, in fact, an update there?
When I figure this first step out, I'll come back. Thanks.
Posted 1 year ago # -
BTW, when I download the 'previously purchased,' theme, the files are identical to what I purchased in May...including the .rtf file. So it looks like maybe it hasn't been updated recently?
Posted 1 year ago # -
Hey,
sorry about that - I must have mislooked at the dates of all the recently updated files. Recently a timthumb vulnerability has come up and it has been patched, it seems it wasn't for habitat. I'll mail Kriesi about the fix.
Again exuse me for the delay/misinformation.Posted 1 year ago # -
Hey! Habitat no longer uses the timthumb script, it instead relies on the natural wordpress resizing. I would suggest to simply delete it from the theme folder. I will release an update for the themes that dont rely on it but have a copy of the file in the theme folder next week ;)
Posted 1 year ago # -
Thanks for letting us know, I'll contact Kriesi about it.
Posted 1 year ago #
Reply
You must log in to post.
Create a new thread and tell me what problems you are encountering and what you want to know. 
There is no step 3 :) 
