CVE-2021-28280 (PHP, published 2021-04-29T15:15Z)
Description: value: CSRF + Cross-site scripting (XSS) vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML
Severity: MEDIUM (CVSS v3 base score: 6.1)
Weakness: CWE-352 \u2014 Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
Repository: https://github.com/PHPFusion/PHPFusion
Files changed:
includes/dynamics/includes/form_buttons.php
includes/dynamics/includes/form_checkbox.php
includes/dynamics/includes/form_colorpicker.php
includes/dynamics/includes/form_contact.php
includes/dynamics/includes/form_datepicker.php
includes/dynamics/includes/form_fileinput.php
includes/dynamics/includes/form_geomap.php
includes/dynamics/includes/form_hidden.php
includes/dynamics/includes/form_main.php
includes/dynamics/includes/form_name.php
includes/dynamics/includes/form_ordering.php
includes/dynamics/includes/form_select.php
includes/dynamics/includes/form_text.php
includes/dynamics/includes/form_textarea.php
themes/templates/default.min.css
Commit message: Fixes broken rendering trying to parse against <script> input values.


Vulnerable code:
    $input_value = stripinput($input_value);
    if (!defined("COLORPICKER")) {
        define("COLORPICKER", TRUE);
        if (defined('BOOTSTRAP4')) {
            add_to_head("<link href='".DYNAMICS."assets/colorpick/bs4/css/bootstrap-colorpicker.min.css' rel='stylesheet'>");
            add_to_head("<script src='".DYNAMICS."assets/colorpick/bs4/js/bootstrap-colorpicker.min.js'></script>");
        } else {
            add_to_head("<link href='".DYNAMICS."assets/colorpick/css/bootstrap-colorpicker.min.css' rel='stylesheet'>");
            add_to_head("<script src='".DYNAMICS."assets/colorpick/js/bootstrap-colorpicker.min.js'></script>");
        }
.label-danger{margin-top:5px}.top-0{top:0!important}.top-5{top:5px!important}.top-10{top:10px!important}.top-20{top:20px!important}.top-30{top:30px!important}.top-40{top:40px!important}.top-50{top:50px!important}.bottom-0{bottom:0!important}.bottom-5{bottom:5px!important}.bottom-10{bottom:10px!important}.bottom-20{bottom:20px!important}.bottom-30{bottom:30px!important}.bottom-40{bottom:40px!important}.bottom-50{bottom:50px!important}.left-0{left:0!important}.left-10{left:10px!important}.left-15{left:15px!important}.left-20{left:20px!important}.left-30{left:30px!important}.left-40{left:40px!important}.left-50{left:50px!important}.right-0{right:0!important}.right-10{right:10px!important}.right-15{right:15px!important}.right-20{right:20px!important}.right-30{right:30px!important}.right-40{right:40px!important}.right-50{right:50px!important}.center-margin-x{margin:0 auto}.row.flexbox{display:-webkit-box;display:flex;overflow:hidden}.row.flexbox.auto_width>div{-webkit-box-flex:1;flex:1}.row.equal-height{display:-webkit-box;display:flex;flex-wrap:wrap}.row.equal-height>[class*=col-]{-webkit-background-clip:content-box;-o-background-clip:content-box;background-clip:content-box;display:-webkit-box;display:-webkit-flex;display:flex;-webkit-flex-wrap:wrap;flex-wrap:wrap;-webkit-box-orient:vertical;-webkit-box-direction:normal;flex-direction:column;-webkit-flex-direction:row}.row.equal-height:after,.row.equal-height:before{content:normal}.row.equal-height>[class*=col-]>*{width:100%}.center-y{position:relative;top:50%;-webkit-transform:translateY(-50%);-ms-transform:translateY(-50%);transform:translateY(-50%)}.center-x{position:relative;left:50%;-webkit-transform:translateX(-50%);-ms-transform:translateX(-50%);transform:translateX(-50%)}.center-xy{position:relative;left:50%;top:50%;-webkit-transform:translate(-50%,-50%);-ms-transform:translate(-50%,-50%);transform:translate(-50%,-50%)}.align-top,.vt{vertical-align:top!important;display:table-cell}.align-middle,.va{vertical-align:middle!important;display:table-cell}.align-bottom,.vb{vertical-align:bottom!important;display:table-cell}.align-left{text-align:left}.align-center{text-align:center}.align-right{text-align:right}.pull-left{float:left}.pull-right{float:right}.spacer-xs{margin:15px 0}.spacer-sm{margin:20px 0}.spacer-md{margin:40px 0}.spacer-lg{margin:80px 0}.m-0{margin:0!important}.m-1{margin:1px!important}.m-2{margin:2px!important}.m-3{margin:3px!important}.m-5{margin:5px!important}.m-10{margin:10px!important}.m-b-0{margin-bottom:0!important}.m-b-5{margin-bottom:5px!important}.m-b-10{margin-bottom:10px!important}.m-b-15{margin-bottom:15px!important}.m-b-20{margin-bottom:20px!important}.m-b-50{margin-bottom:50px!important}.m-t-0{margin-top:0!important}.m-t-3{margin-top:3px!important}.m-t-5{margin-top:5px!important}.m-t-10{margin-top:10px!important}.m-t-15{margin-top:15px!important}.m-t-20{margin-top:20px!important}.m-t-30{margin-top:30px!important}.m-l-0{margin-left:0!important}.m-l-5{margin-left:5px!important}.m-l-10{margin-left:10px!important}.m-l-15{margin-left:15px!important}.m-l-20{margin-left:20px!important}.m-l-30{margin-left:30px!important}.m-r-0{margin-right:0!important}.m-r-5{margin-right:5px!important}.m-r-10{margin-right:10px!important}.m-r-15{margin-right:15px!important}.m-r-20{margin-right:20px!important}.m-r-30{margin-right:30px!important}.m-auto{margin:0 auto!important}.m-l--15{margin-left:-15px!important}.m-r--15{margin-right:-15px!important}.p-0{padding:0!important}.p-5{padding:5px!important}.p-10{padding:10px!important}.p-15{padding:15px!important}.p-20{padding:20px!important}.p-25{padding:25px!important}.p-t-0{padding-top:0!important}.p-t-5{padding-top:5px!important}.p-t-10{padding-top:10px!important}.p-t-15{padding-top:15px!important}.p-t-20{padding-top:20px!important}.p-l-0{padding-left:0!important}.p-l-5{padding-left:5px!important}.p-l-10{padding-left:10px!important}.p-l-15{padding-left:15px!important}.p-l-20{padding-left:20px!important}.p-r-0{padding-right:0!important}.p-r-5{padding-right:5px!important}.p-r-10{padding-right:10px!important}.p-r-15{padding-right:15px!important}.p-r-20{padding-right:20px!important}.p-b-0{padding-bottom:0!important}.p-b-5{padding-bottom:5px!important}.p-b-10{padding-bottom:10px!important}.p-b-15{padding-bottom:15px!important}.p-b-20{padding-bottom:20px!important}.overflow-hide{overflow:hidden}.display-none{display:none}.display-block{display:block;width:100%}.display-inline{display:inline}.display-inline-block{display:inline-block}.display-table{display:table}.display-table-row{display:table-row}.display-table-cell{display:table-cell}.position-relative{position:relative}.position-absolute{position:absolute}.transition{-webkit-transition:all 0.2s ease-in-out;transition:all 0.2s ease-in-out}.no-shadow{box-shadow:none!important}.bbr-0{border-radius:0!important}.br-0,.no-border{border:0!important}.br-l-0{border-left:0}.br-r-0{border-right:0}.br-t-0{border-top:0}.br-b-0{border-bottom:0}.text-white{color:#FFF!important}.text-dark{color:#333!important}.text-black{color:#444!important}.text-lighter{opacity:0.8}.text-darker{opacity:1}.text-bigger{font-size:110%!important}.text-smaller{font-size:85%!important}.font-bold,.strong,.text-bold{font-weight:bold!important}.font-light,.text-light{font-weight:300!important}.font-normal,.text-normal{font-weight:normal!important;text-transform:none!important;text-decoration:none!important;color:inherit!important}.text-active{color:rgb(66,139,202)}.text-disabled{color:#F7F7F7}.text-serif{font-family:'Times New Roman',Courier,"Courier New",serif}.uppercase{text-transform:uppercase}.text-uppercase{text-transform:uppercase}.text-capitalize{text-transform:capitalize}.text-underline{text-decoration:underline}.img-center{display:inline-block;position:relative!important;left:100%!important;margin-left:-200%!important}.thumb>img{width:auto;height:auto;margin-left:auto;margin-right:auto;display:inline-block}.thumb>span{background-color:#DDD;text-align:center}.pdisabled{background-color:rgb(252,248,227)!important;border-color:rgb(250,235,204)!important}.pdisabled>.handle>a{color:rgb(138,109,59)!important}.blur{-webkit-filter:blur(5px) grayscale(50%)}.pointer{cursor:pointer}.no-border{border:0!important}.bordered{border:1px solid}ul.block,ul.error-list{list-style:none outside none}ol.decimal{list-style:decimal inside}ul{padding:0}li.panel{box-shadow:none!important;margin-bottom:0!important;background:none;border:0}.list-style-none>li{list-style:none}ul>li{padding:0;list-style-position:inside}.icon-xs{font-size:16px!important;width:16px}.icon-sm{font-size:32px!important;width:32px}.icon-md{font-size:48px!important;width:48px}.icon-lg{font-size:128px!important;width:128px}.icon-xl{font-size:256px!important;width:256px}.clearfix{display:block}.clearfix:after,li:after{visibility:hidden;display:block;font-size:0;content:" ";clear:both;height:0}* html,* html .clearfix{zoom:1}.floatfix{overflow:hidden}* html .floatfix{width:100%}.no-opacity,.opacity-none{opacity:0}.low-opacity{opacity:0.2}.mid-opacity{opacity:0.45}.high-opacity{opacity:0.8}.full-opacity{opacity:1}#profile-li ul{padding:0}#profile-li>li{padding:0}#profile-li>li>a{padding:8px 3px;width:100%;display:inline-block;outline:none}.select2-input{color:#999!important;border:none!important}.select2-offscreen{display:none}.tbl{display:table-cell!important}.required{color:red!important}a img{border:0}dd,dl,dt{margin:0;padding:0;overflow:hidden}.dms-switch:hover,.list-group-item:hover .status{text-decoration:underline}.animated-height{-webkit-transition:height 0.2s;transition:height 0.2s}.user-tooltip{width:250px;padding-bottom:10px}.form-inline>.form-group{width:auto!important}table{font-size:100%}.icon-wrapper img{max-width:48px;margin:15px auto 5px}.icon-wrapper>.icon-container{text-align:center}.tablesorter-default .header,.tablesorter-default .tablesorter-header{background:url(data:image/gif;base64,R0lGODlhFQAJAIAAACMtMP///yH5BAEAAAEALAAAAAAVAAkAAAIXjI+AywnaYnhUMoqt3gZXPmVg94yJVQAAOw==) no-repeat center right}.tablesorter-default thead .headerSortUp,.tablesorter-default thead .tablesorter-headerAsc,.tablesorter-default thead .tablesorter-headerSortUp{background:url(data:image/gif;base64,R0lGODlhFQAEAIAAACMtMP///yH5BAEAAAEALAAAAAAVAAQAAAINjI8Bya2wnINUMopZAQA7) no-repeat center right}.tablesorter-default thead .headerSortDown,.tablesorter-default thead .tablesorter-headerDesc,.tablesorter-default thead .tablesorter-headerSortDown{background:url(data:image/gif;base64,R0lGODlhFQAEAIAAACMtMP///yH5BAEAAAEALAAAAAAVAAQAAAINjB+gC+jP2ptn0WskLQA7) no-repeat center right}td.min,th.min{width:1%}.image-wrap{position:relative;overflow:hidden;width:100%}.image-wrap.cropfix{max-width:100%!important;margin:0!important}.word-break{word-break:break-all;word-wrap:break-word}.no-break{white-space:nowrap}.sl{margin:20px 0}.sl .uip{margin:5px 0}.side>li img,.sl>li img{width:19px;margin-right:8px!important}.HTML-img:hover ul.dropdown-menu{display:block}.stacked{display:inline-block;width:auto;margin-right:10px}.icon-stack{position:relative;display:inline-block;width:100%;line-height:2em;vertical-align:middle;text-align:center}.icon-stack>.icon,.icon-stack>.icon:before{position:absolute;top:50%;-webkit-transform:translateY(-50%);-ms-transform:translateY(-50%);transform:translateY(-50%);width:100%;text-align:center;left:0;margin:0}.clearBg{background-color:transparent!important}.whiteBg{background-color:#fff!important}.btn-modal.btn-file{border:1px dashed #ccc;width:100%}.file-preview-frame{display:block!important}.panel>.file-preview{border:transparent}.file-preview-image{width:100%;height:200px}.file-input .panel{width:200px}.file-input .panel .file-preview-image{display:inline-block;max-width:100%;vertical-align:middle}.file-input .panel .file-default-preview,.file-input .panel .file-preview-frame,.file-input .panel .file-preview-other{height:143px;max-height:143px;width:100%;display:block;margin:0;border:0;box-shadow:none;padding:0;float:none;overflow:hidden}.file-input img{height:100%;width:auto;margin:0 auto}.comments-form-panel,.comments-panel{margin-bottom:20px}.comments-form-header,.comments-header{position:relative;padding:10px 0}.comments-form-header:after,.comments-form-header:before,.comments-header:after,.comments-header:before{top:100%;left:5%;border:solid transparent;content:" ";height:0;width:0;position:absolute;pointer-events:none}.arrow_box{position:relative;background:#fff;border:1px solid #ddd;margin-left:15px;margin-bottom:20px;padding:3px 15px 15px}.arrow_box:after,.arrow_box:before{right:100%;top:33%;border:solid transparent;content:" ";height:0;width:0;position:absolute;pointer-events:none}.arrow_box:after{border:12px rgba(255,255,255,0);border-right-color:#fff;margin-top:-12px}.arrow_box:before{border:14px rgba(221,221,221,0);border-right-color:#ddd;margin-top:-14px}.comment-actions{margin-top:10px}.comment-actions>.btn-group{display:-webkit-inline-box;display:inline-flex}.comments_reply_form{margin-bottom:30px}.panel-txtarea .preview-response{background-color:#f5f4f4;word-wrap:break-word;word-break:break-all}.panel-txtarea .bbcode{margin:5px 1px}.editor-wrapper .nav{display:inline-block;float:right;padding:0}.editor-wrapper .panel-footer,.editor-wrapper .panel-heading{background:transparent}.editor-wrapper>ul>li{float:right}.media-container{position:relative;overflow:hidden;border:3px solid transparent}.media-container.selected{border:3px solid #3879D9}.media-container img{position:relative}.shoutboxwrapper{margin-top:20px;word-wrap:break-word}ul>li.divider{display:block;height:10px;border-bottom:1px solid #ddd}#delete_status-field{float:left;width:auto;margin-bottom:0}.logo-xs-left{text-align:left}.logo-xs-center{text-align:center;margin-left:auto;margin-right:auto}.logo-xs-right{text-align:right}@media (min-width:768px){.logo-sm-left{text-align:left}.logo-sm-center{text-align:center;margin-left:auto;margin-right:auto}.logo-sm-right{text-align:right}}@media (min-width:992px){.logo-md-left{text-align:left}.logo-md-center{text-align:center;margin-left:auto;margin-right:auto}.logo-md-right{text-align:right}}@media (min-width:1200px){.logo-lg-left{text-align:left}.logo-lg-center{text-align:center;margin-left:auto;margin-right:auto}.logo-lg-right{text-align:right}}ul.navbar-nav li.no-link{position:relative}ul.dropdown-menu,ul.dropdown-menu>li>ul{list-style:none}.control-label>img,label img{margin-right:5px;max-width:24px}.text-overflow-hide{overflow:hidden;text-overflow:ellipsis}.order-caret-down-current:hover:after,.order-caret-up-current:after,.order-caret-up:hover:after{font-family:'FontAwesome 5 Free',sans-serif;content:'\f0d8';display:inline-block;color:#23282d;margin-left:10px}.order-caret-down-current:after,.order-caret-down:hover:after,.order-caret-up-current:hover:after{font-family:'FontAwesome 5 Free',sans-serif;content:'\f0d7';display:inline-block;color:#23282d;margin-left:10px}.tbl_actions{display:none}tr:hover>td .tbl_actions{display:block}.tbl_actions>span:after{content:"|";display:inline-block;padding:0 5px;color:#ccc}.tbl_actions>span:last-child:after{content:""}.text-normal label{font-weight:400}.thumb>img{display:block;width:100%}.avatar.img-rounded>svg{border-radius:6px}.avatar.img-circle>svg{border-radius:50%}.rank-label{padding:6px 10px}.rank-label>.detail{background:rgba(0,0,0,.1);margin:0 -10px 0 10px;padding:7px 12px;border-radius:0 .28571429rem .28571429rem 0;display:inline-block;font-weight:700;opacity:.8}.rank-label.label-super-admin{background-color:#504cc7}.rank-label.label-mod{background-color:#00B5AD;border-color:#00B5AD}.rank-label.label-member{background-color:#2185D0;border-color:#2185D0}#site-links{list-style:none;min-height:20px;height:auto!important}#site-links li{display:block;margin:30px;padding:10px}#site-links li img.handle{cursor:ns-resize}.state-highlight{background:#FFC;height:20px}.floatfix{overflow:hidden}#panel-side1,#panel-side2,#panel-side3,#panel-side4,#panel-side5,#panel-side6{list-style:none;height:auto!important}#panel-side1 li,#panel-side2 li,#panel-side3 li,#panel-side4 li,#panel-side5 li,#panel-side6 li{display:block}#panel-side1 li img.handle,#panel-side2 li img.handle,#panel-side3 li img.handle,#panel-side4 li img.handle,#panel-side5 li img.handle,#panel-side6 li img.handle{cursor:ns-resize}html[dir=rtl] body{direction:rtl}html[dir=rtl] .pull-left{float:right!important}html[dir=rtl] .pull-right{float:left!important}html[dir=rtl] .center-x{left:inherit;right:50%;-webkit-transform:translateX(50%);-ms-transform:translateX(50%);transform:translateX(50%)}html[dir=rtl] .center-xy{left:inherit;right:50%;-webkit-transform:translate(50%,-50%);-ms-transform:translate(50%,-50%);transform:translate(50%,-50%)}.admin-form-type-1{display:-ms-grid;display:grid;-ms-grid-columns:70% 30%;grid-template-columns:70% 30%}@media (max-width:991px){.admin-form-type-1{-ms-grid-columns:1fr;grid-template-columns:1fr}}

Fixed code:
    $input_value = clean_input_value($input_value);
    $input_value = clean_input_value($input_value);


    $input_value = clean_input_value($input_value);
    if (defined('BOOTSTRAP4')) {
        fusion_load_script(DYNAMICS.'assets/colorpick/bs4/css/bootstrap-colorpicker.min.css', 'css');
        fusion_load_script(DYNAMICS.'assets/colorpick/bs4/js/bootstrap-colorpicker.min.js');
    } else {
        fusion_load_script(DYNAMICS.'assets/colorpick/css/bootstrap-colorpicker.min.css', 'css');
        fusion_load_script(DYNAMICS.'assets/colorpick/js/bootstrap-colorpicker.min.js');
    $input_value = clean_input_value($input_value);

    $input_value = clean_input_value($input_value);


    $input_value = clean_input_value($input_value);


    $input_value = clean_input_value($input_value);



    $input_value = clean_input_value($input_value);

function clean_input_value($value) {
    if (is_string($value)) {
        return descript($value);
    }
    if (is_array($value)) {
        return array_map('descript', $value);
    }
    return '';
}


    $input_value = clean_input_value($input_value);


    $input_value = clean_input_value($input_value);



    $input_value = clean_input_value($input_value);

    $input_value = clean_input_value($input_value);
    $input_value = clean_input_value($input_value);

    $input_value = clean_input_value($input_value);


.label-danger{margin-top:5px}.top-0{top:0!important}.top-5{top:5px!important}.top-10{top:10px!important}.top-20{top:20px!important}.top-30{top:30px!important}.top-40{top:40px!important}.top-50{top:50px!important}.bottom-0{bottom:0!important}.bottom-5{bottom:5px!important}.bottom-10{bottom:10px!important}.bottom-20{bottom:20px!important}.bottom-30{bottom:30px!important}.bottom-40{bottom:40px!important}.bottom-50{bottom:50px!important}.left-0{left:0!important}.left-10{left:10px!important}.left-15{left:15px!important}.left-20{left:20px!important}.left-30{left:30px!important}.left-40{left:40px!important}.left-50{left:50px!important}.right-0{right:0!important}.right-10{right:10px!important}.right-15{right:15px!important}.right-20{right:20px!important}.right-30{right:30px!important}.right-40{right:40px!important}.right-50{right:50px!important}.center-margin-x{margin:0 auto}.row.flexbox{display:-webkit-box;display:flex;overflow:hidden}.row.flexbox.auto_width>div{-webkit-box-flex:1;flex:1}.row.equal-height,.row.equal-height>[class*=col-]{display:-webkit-box;display:flex;flex-wrap:wrap}.row.equal-height>[class*=col-]{-webkit-background-clip:content-box;-o-background-clip:content-box;background-clip:content-box;display:-webkit-flex;-webkit-flex-wrap:wrap;-webkit-box-orient:vertical;-webkit-box-direction:normal;flex-direction:column;-webkit-flex-direction:row}.row.equal-height:after,.row.equal-height:before{content:normal}.row.equal-height>[class*=col-]>*{width:100%}.center-y{position:relative;top:50%;-webkit-transform:translateY(-50%);-ms-transform:translateY(-50%);transform:translateY(-50%)}.center-x,.center-xy{position:relative;left:50%}.center-x{-webkit-transform:translateX(-50%);-ms-transform:translateX(-50%);transform:translateX(-50%)}.center-xy{top:50%;-webkit-transform:translate(-50%,-50%);-ms-transform:translate(-50%,-50%);transform:translate(-50%,-50%)}.align-top,.vt{vertical-align:top!important;display:table-cell}.align-bottom,.align-middle,.va,.vb{vertical-align:middle!important;display:table-cell}.align-bottom,.vb{vertical-align:bottom!important}.align-left{text-align:left}.align-center,.thumb>span{text-align:center}.align-right{text-align:right}.pull-left{float:left}.editor-wrapper>ul>li,.pull-right{float:right}.spacer-xs{margin:15px 0}.spacer-sm{margin:20px 0}.spacer-md{margin:40px 0}.spacer-lg{margin:80px 0}.m-0{margin:0!important}.m-1{margin:1px!important}.m-2{margin:2px!important}.m-3{margin:3px!important}.m-5{margin:5px!important}.m-10{margin:10px!important}.m-b-0{margin-bottom:0!important}.m-b-5{margin-bottom:5px!important}.m-b-10{margin-bottom:10px!important}.m-b-15{margin-bottom:15px!important}.m-b-20{margin-bottom:20px!important}.m-b-50{margin-bottom:50px!important}.m-t-0{margin-top:0!important}.m-t-3{margin-top:3px!important}.m-t-5{margin-top:5px!important}.m-t-10{margin-top:10px!important}.m-t-15{margin-top:15px!important}.m-t-20{margin-top:20px!important}.m-t-30{margin-top:30px!important}.m-l-0{margin-left:0!important}.m-l-5{margin-left:5px!important}.m-l-10{margin-left:10px!important}.m-l-15{margin-left:15px!important}.m-l-20{margin-left:20px!important}.m-l-30{margin-left:30px!important}.m-r-0{margin-right:0!important}.m-r-5{margin-right:5px!important}.m-r-10{margin-right:10px!important}.m-r-15{margin-right:15px!important}.m-r-20{margin-right:20px!important}.m-r-30{margin-right:30px!important}.m-auto{margin:0 auto!important}.m-l--15{margin-left:-15px!important}.m-r--15{margin-right:-15px!important}.p-0{padding:0!important}.p-5{padding:5px!important}.p-10{padding:10px!important}.p-15{padding:15px!important}.p-20{padding:20px!important}.p-25{padding:25px!important}.p-t-0{padding-top:0!important}.p-t-5{padding-top:5px!important}.p-t-10{padding-top:10px!important}.p-t-15{padding-top:15px!important}.p-t-20{padding-top:20px!important}.p-l-0{padding-left:0!important}.p-l-5{padding-left:5px!important}.p-l-10{padding-left:10px!important}.p-l-15{padding-left:15px!important}.p-l-20{padding-left:20px!important}.p-r-0{padding-right:0!important}.p-r-5{padding-right:5px!important}.p-r-10{padding-right:10px!important}.p-r-15{padding-right:15px!important}.p-r-20{padding-right:20px!important}.p-b-0{padding-bottom:0!important}.p-b-5{padding-bottom:5px!important}.p-b-10{padding-bottom:10px!important}.p-b-15{padding-bottom:15px!important}.p-b-20{padding-bottom:20px!important}.overflow-hide{overflow:hidden}.display-none{display:none}.display-block{display:block;width:100%}.display-inline{display:inline}#profile-li>li>a,.display-inline-block{display:inline-block}.display-table{display:table}.display-table-row{display:table-row}.display-table-cell{display:table-cell}.position-relative{position:relative}.position-absolute{position:absolute}.transition{-webkit-transition:all .2s ease-in-out;transition:all .2s ease-in-out}.no-shadow,li.panel{box-shadow:none!important}.bbr-0{border-radius:0!important}.br-0{border:0!important}.br-l-0{border-left:0}.br-r-0{border-right:0}.br-t-0{border-top:0}.br-b-0{border-bottom:0}.text-white{color:#fff!important}.text-dark{color:#333!important}.text-black{color:#444!important}.text-lighter{opacity:.8}.text-darker{opacity:1}.text-bigger{font-size:110%!important}.text-smaller{font-size:85%!important}.font-bold,.strong,.text-bold{font-weight:700!important}.font-light,.text-light{font-weight:300!important}.font-normal,.text-normal{font-weight:400!important;text-transform:none!important;text-decoration:none!important;color:inherit!important}.text-active{color:#428bca}.text-disabled{color:#f7f7f7}.text-serif{font-family:'Times New Roman',Courier,"Courier New",serif}.text-uppercase,.uppercase{text-transform:uppercase}.text-capitalize{text-transform:capitalize}.dms-switch:hover,.list-group-item:hover .status,.text-underline{text-decoration:underline}.img-center{display:inline-block;position:relative!important;left:100%!important;margin-left:-200%!important}.thumb>img{height:auto;margin-left:auto;margin-right:auto}.thumb>span{background-color:#ddd}.pdisabled{background-color:#fcf8e3!important;border-color:#faebcc!important}.pdisabled>.handle>a{color:#8a6d3b!important}.blur{-webkit-filter:blur(5px) grayscale(50%)}.pointer{cursor:pointer}.no-border{border:0!important}.bordered{border:1px solid}ul.block,ul.error-list{list-style:none outside none}ol.decimal{list-style:decimal inside}#profile-li ul,#profile-li>li,dd,dl,dt,ul,ul>li{padding:0}li.panel{margin-bottom:0!important;background:0 0;border:0}.list-style-none>li,ul.dropdown-menu,ul.dropdown-menu>li>ul{list-style:none}ul>li{list-style-position:inside}.icon-xs{font-size:16px!important;width:16px}.icon-sm{font-size:32px!important;width:32px}.icon-md{font-size:48px!important;width:48px}.icon-lg{font-size:128px!important;width:128px}.icon-xl{font-size:256px!important;width:256px}.HTML-img:hover ul.dropdown-menu,.clearfix,tr:hover>td .tbl_actions{display:block}.clearfix:after,li:after{visibility:hidden;display:block;font-size:0;content:" ";clear:both;height:0}* html,* html .clearfix{zoom:1}* html .floatfix{width:100%}.no-opacity,.opacity-none{opacity:0}.low-opacity{opacity:.2}.mid-opacity{opacity:.45}.high-opacity{opacity:.8}.full-opacity{opacity:1}#profile-li>li>a{padding:8px 3px;width:100%;outline:0}.select2-input{color:#999!important;border:0!important}.select2-offscreen{display:none}.tbl{display:table-cell!important}.required{color:red!important}a img{border:0}dd,dl,dt{margin:0;overflow:hidden}.animated-height{-webkit-transition:height .2s;transition:height .2s}.user-tooltip{width:250px;padding-bottom:10px}.form-inline>.form-group{width:auto!important}table{font-size:100%}.icon-wrapper img{max-width:48px;margin:15px auto 5px}.icon-wrapper>.icon-container{text-align:center}.tablesorter-default .header,.tablesorter-default .tablesorter-header{background:url(data:image/gif;base64,R0lGODlhFQAJAIAAACMtMP///yH5BAEAAAEALAAAAAAVAAkAAAIXjI+AywnaYnhUMoqt3gZXPmVg94yJVQAAOw==) no-repeat center right}.tablesorter-default thead .headerSortUp,.tablesorter-default thead .tablesorter-headerAsc,.tablesorter-default thead .tablesorter-headerSortUp{background:url(data:image/gif;base64,R0lGODlhFQAEAIAAACMtMP///yH5BAEAAAEALAAAAAAVAAQAAAINjI8Bya2wnINUMopZAQA7) no-repeat center right}.tablesorter-default thead .headerSortDown,.tablesorter-default thead .tablesorter-headerDesc,.tablesorter-default thead .tablesorter-headerSortDown{background:url(data:image/gif;base64,R0lGODlhFQAEAIAAACMtMP///yH5BAEAAAEALAAAAAAVAAQAAAINjB+gC+jP2ptn0WskLQA7) no-repeat center right}td.min,th.min{width:1%}.image-wrap{position:relative;overflow:hidden;width:100%}.image-wrap.cropfix{max-width:100%!important;margin:0!important}.word-break{word-break:break-all;word-wrap:break-word}.no-break{white-space:nowrap}.sl{margin:20px 0}.sl .uip{margin:5px 0}.side>li img,.sl>li img{width:19px;margin-right:8px!important}.stacked{display:inline-block;width:auto;margin-right:10px}.icon-stack{position:relative;display:inline-block;width:100%;line-height:2em;vertical-align:middle;text-align:center}.icon-stack>.icon,.icon-stack>.icon::before{position:absolute;top:50%;-webkit-transform:translateY(-50%);-ms-transform:translateY(-50%);transform:translateY(-50%);width:100%;text-align:center;left:0;margin:0}.clearBg{background-color:transparent!important}.whiteBg{background-color:#fff!important}.btn-modal.btn-file{border:1px dashed #ccc;width:100%}.file-preview-frame{display:block!important}.panel>.file-preview{border:transparent}.file-preview-image{width:100%;height:200px}.file-input .panel{width:200px}.file-input .panel .file-preview-image{display:inline-block;max-width:100%;vertical-align:middle}.file-input .panel .file-default-preview,.file-input .panel .file-preview-frame,.file-input .panel .file-preview-other{height:143px;max-height:143px;width:100%;display:block;margin:0;border:0;box-shadow:none;padding:0;float:none;overflow:hidden}.file-input img{height:100%;width:auto;margin:0 auto}.comments-form-panel,.comments-panel{margin-bottom:20px}.arrow_box,.comments-form-header,.comments-header{position:relative;padding:10px 0}.comments-form-header:after,.comments-form-header:before,.comments-header:after,.comments-header:before{top:100%;left:5%;border:solid transparent;content:" ";height:0;width:0;position:absolute;pointer-events:none}.arrow_box{background:#fff;border:1px solid #ddd;margin-left:15px;margin-bottom:20px;padding:3px 15px 15px}.arrow_box:after,.arrow_box:before{right:100%;top:33%;content:" ";height:0;width:0;position:absolute;pointer-events:none}.arrow_box:after{border:12px transparent;border-right-color:#fff;margin-top:-12px}.arrow_box:before{border:14px transparent;border-right-color:#ddd;margin-top:-14px}.comment-actions{margin-top:10px}.comment-actions>.btn-group{display:-webkit-inline-box;display:inline-flex}.comments_reply_form{margin-bottom:30px}.panel-txtarea .preview-response{background-color:#f5f4f4;word-wrap:break-word;word-break:break-all}.panel-txtarea .bbcode{margin:5px 1px}.editor-wrapper .nav{display:inline-block;float:right;padding:0}.editor-wrapper .panel-footer,.editor-wrapper .panel-heading{background:0 0}.media-container{overflow:hidden;border:3px solid transparent}.media-container.selected{border:3px solid #3879d9}.media-container,.media-container img,ul.navbar-nav li.no-link{position:relative}.shoutboxwrapper{margin-top:20px;word-wrap:break-word}ul>li.divider{display:block;height:10px;border-bottom:1px solid #ddd}#delete_status-field{float:left;width:auto;margin-bottom:0}.logo-xs-left{text-align:left}.logo-xs-center{text-align:center;margin-left:auto;margin-right:auto}.logo-xs-right{text-align:right}@media (min-width:768px){.logo-sm-left{text-align:left}.logo-sm-center{text-align:center;margin-left:auto;margin-right:auto}.logo-sm-right{text-align:right}}@media (min-width:992px){.logo-md-left{text-align:left}.logo-md-center{text-align:center;margin-left:auto;margin-right:auto}.logo-md-right{text-align:right}}@media (min-width:1200px){.logo-lg-left{text-align:left}.logo-lg-center{text-align:center;margin-left:auto;margin-right:auto}.logo-lg-right{text-align:right}}.control-label>img,label img{margin-right:5px;max-width:24px}.text-overflow-hide{overflow:hidden;text-overflow:ellipsis}.order-caret-down-current:hover:after,.order-caret-up-current:after,.order-caret-up:hover:after{font-family:'FontAwesome 5 Free',sans-serif;content:'\f0d8';display:inline-block;color:#23282d;margin-left:10px}.order-caret-down-current:after,.order-caret-down:hover:after,.order-caret-up-current:hover:after{font-family:'FontAwesome 5 Free',sans-serif;content:'\f0d7';display:inline-block;color:#23282d;margin-left:10px}.tbl_actions{display:none}.tbl_actions>span:after{content:"|";display:inline-block;padding:0 5px;color:#ccc}.tbl_actions>span:last-child:after{content:""}.text-normal label{font-weight:400}.thumb>img{display:block;width:100%}.avatar.img-rounded>svg{border-radius:6px}.avatar.img-circle>svg{border-radius:50%}.rank-label{padding:6px 10px}.rank-label>.detail{background:rgba(0,0,0,.1);margin:0 -10px 0 10px;padding:7px 12px;border-radius:0 .28571429rem .28571429rem 0;display:inline-block;font-weight:700;opacity:.8}.rank-label.label-super-admin{background-color:#504cc7}.rank-label.label-mod{background-color:#00b5ad;border-color:#00b5ad}.rank-label.label-member{background-color:#2185d0;border-color:#2185d0}#site-links{min-height:20px}#site-links li{display:block;margin:30px;padding:10px}#panel-side1 li img.handle,#panel-side2 li img.handle,#panel-side3 li img.handle,#panel-side4 li img.handle,#panel-side5 li img.handle,#panel-side6 li img.handle,#site-links li img.handle{cursor:ns-resize}.state-highlight{background:#ffc;height:20px}.floatfix{overflow:hidden}#panel-side1,#panel-side2,#panel-side3,#panel-side4,#panel-side5,#panel-side6,#site-links{list-style:none;height:auto!important}#panel-side1 li,#panel-side2 li,#panel-side3 li,#panel-side4 li,#panel-side5 li,#panel-side6 li{display:block}html[dir=rtl] body{direction:rtl}html[dir=rtl] .pull-left{float:right!important}html[dir=rtl] .pull-right{float:left!important}html[dir=rtl] .center-x{left:inherit;right:50%;-webkit-transform:translateX(50%);-ms-transform:translateX(50%);transform:translateX(50%)}html[dir=rtl] .center-xy{left:inherit;right:50%;-webkit-transform:translate(50%,-50%);-ms-transform:translate(50%,-50%);transform:translate(50%,-50%)}.admin-form-type-1{display:-ms-grid;display:grid;-ms-grid-columns:70% 30%;grid-template-columns:70% 30%}@media (max-width:991px){.admin-form-type-1{-ms-grid-columns:1fr;grid-template-columns:1fr}}