Note : This patch was updated on the 5th of March, 2012 after the initial release on the 1st of March. If you still see the "Template load error" after applying the initial patch, please download again and re-apply the patch.
Thanks to the community feedback, we found an issue in Movable Type 5.13, 5.07, and 4.38 Security Updates and created a patch to resolve it. Due to the more strict policy in 5.13, 5.07 and 4.38, some plugins produce the "Template load error". There are two ways to resolve this error:
- Fix your plugin to meet the security policy in 5.13 / 5.07 / 4.38.
- Apply the patch and enable AllowFileInclude configuration directive to moderate the strict security policy.
It is recommended to (1) fix the plugin because AllowFileInclude weakens the protection against malicious plugins and templates. Please do not forget to disable AllowFileInclude directive once you update your plugin to the fixed version.
Please refer to the following pages for details.
- Movable Type 5.13, 5.07, and 4.38 patch 1 release notes
- How to apply the patch
- How to fix your plugin
If you are not seeing this "Template load error" after your upgrade, you don't need to apply this patch. This patch will be included in the next release of Movable Type.
PRO IT Service on March 2, 2012, 2:11 p.m. Reply
I’ve already seen this in action inside one of my projects, so thanks for releasing this fix Jun!
Kind Regards, Mihai Bocsaru
Bill on March 4, 2012, 8:45 p.m. Reply
If we are not experiencing the “Template load error” after updating to 5.13 / 5.07 / 4.38 is it still recommended to install this patch?
Jun Kaneko on March 4, 2012, 9:20 p.m. Reply
Hi bill,
No, you don’t have to install the patch if you are not seeing the error. The fix will be included in the next release of Movable Type ( 5.14 ).
PRO IT Service on March 7, 2012, 1:14 p.m. Reply
I would still recommend implementing the patch, as a principle.
PRO IT Service on March 7, 2012, 1:17 p.m. Reply
Hi Jun,
Please consider integrating the v5.13 patch inside the v5.13 product versions available for download.
That way we could make sure that anybody downloading the product from now on, would have the patch included in the installation files.
Once that is done, you could add a notice here that since March the XXth, this patch is included on the v5.13 installation package.
Thanks, Mihai
Jun Kaneko on March 7, 2012, 6:05 p.m. Reply
Mihai,
Thanks for your thought. We must ship a new version to change the code otherwise nobody can tell which versions of the software she is using.
PRO IT Service on March 8, 2012, 6:45 a.m. Reply
I was just thinking to add this fix to the downloadable version and then to put a notice on this page that from today on this patch is inside the version that is available for download.
Thanks, Mihai
Andon Ivanov on March 21, 2012, 2:28 a.m. Reply
I don`t understand, if i download final version this patch its appled or need to apply after instal MT?
Davideo on March 23, 2012, 1:53 a.m. Reply
Bonne nouvelle ! Je dois lancer un nouveau site. Je vais pouvoir me servir de la dernière version de MT!
cakesdeliveryhyderabad on April 12, 2012, 12:33 a.m. Reply
Cakes give the reasons to go delicious, and that’s the reason that this king of confectionary items centre all the celebrations and moods. The mood will go crazy now, for, the cake specialist called CakesDeliveryHyderabad.com is on action now. Join the cake cascade that www.cakesdeliveryhyderabad.com is filled with.
Mellany High on July 3, 2012, 6:02 a.m. Reply
I’ve done it twise but I still got the error message. After 24 hours delay and another downloading it has been fixed.
Russin on September 25, 2012, 10:12 a.m. Reply
Good patch update to stop malicious plugins and templates
Phen375 on October 11, 2012, 8:13 p.m. Reply
I don’t know but i am little bit confuse over this patch. I need to install it or what?
Bosbirding on October 12, 2012, 3:02 a.m. Reply
Very nice and interesting post. I like the idea of this patch and i hope everyone knows it better before using it.
broanrange on October 14, 2012, 10:30 p.m. Reply
wow,really thanks for your great update.just got “Template load error” before.so already download the file,ready to upgrade now.Cheerz.:?
6500k cfl on October 23, 2012, 12:14 a.m. Reply
Hi thanks for sharing. Movable Type is great.
Deer antler velvet on October 26, 2012, 5:33 a.m. Reply
i really enjoy this post,thx for share.
battery on October 28, 2012, 11:43 p.m. Reply
thanks for sharing..
iwin.vn on November 5, 2012, 8:47 p.m. Reply
thanks for the post. All of us on the Movable Type team are excited to show off what we’ve been able to do thanks to the efforts of our community.
Joe Flacco Jersey on November 9, 2012, 8:09 p.m. Reply
thanks for the post.Fantastic article, I can’t wait to view more
huanghaiqing on November 10, 2012, 2:10 a.m. Reply
Bonne nouvelle ! Je dois lancer un nouveau site. Je vais pouvoir me servir de la dernière version de MT!
beijing escort on November 11, 2012, 4:31 a.m. Reply
Thank you posting relative informatio
christian louboutin replica on December 25, 2012, 1:27 a.m. Reply
yes, I will try it
fleshlight review on April 5, 2013, 11:37 a.m. Reply
Thanks for the patch Jun, I did have some problems with the “Template load error” message, but downloading and reapplying the patch seemed to work. Thanks.