Just wanted to bring to your attention a bug in wp-content/themes/lithiumicious/functions/thumb/thumb.php:

The stripping of “http/https” and “www.” doesn’t happen as expected in cleanSource(). I have changed the function to what is shown below, and now it works.

To all those reading: change the function cleanSource() in thumb.php to the following:

/**
* tidy up the image source url
*/
function cleanSource($src) {

// remove slash from start of string
if(strpos($src, “/”) == 0) {
$src = substr($src, -(strlen($src) – 1));
}

// remove http/ https/ ftp
$src = preg_replace(“/^((ht|f)tp(s|):\/\/)/i”, “”, $src);

// remove domain name from the source url
$host = $_SERVER["HTTP_HOST"];
$src = str_replace($host, “”, $src);
$src = str_replace(“www.”, “”, $src);

// don’t allow users the ability to use ‘../’
// in order to gain access to files below document root

// src should be specified relative to document root like:
// src=images/img.jpg or src=/images/img.jpg
// not like:
// src=../images/img.jpg
$src = preg_replace(“/\.\.+\//”, “”, $src);

// get path to image on file system
$src = get_document_root($src) . ‘/’ . $src;

return $src;

}

Regards

Vijay