MBI Theme 19+

🎯 Module Overview

Theme MBI is a modern, full-featured theme for Dolibarr, based on Bootstrap 5, that fully modernizes the interface while keeping Dolibarr's usability. It replaces the standard look with a clean, professional design (top bar, left menu, lists, record pages, dashboard) without changing Dolibarr's business logic. It is in production for many customers.

The theme is made of two inseparable parts:

• a theme (in htdocs/theme/mbi) that provides the visual rendering (CSS);
• a module (themembi, in htdocs/custom/themembi) that drives the menu handler, the login template, the interface transformations, and automatically activates the theme.

🧭 Benefits

• A modern, clear and professional interface, with no need to relearn Dolibarr.
• Better readability of lists, record pages and dashboards.
• A consistent experience across all Dolibarr modules.
• One-click activation: the module automatically activates and forces the theme.

⚙️ Features

• Full Bootstrap 5 interface: top bar, collapsible left menu, reworked lists, record pages and forms.
• Modernized dashboard: restyled info-boxes and widgets, charts rendered with ApexCharts.
• Top search bar with category targeting.
• Notifications dropdown (the user's latest agenda events).
• Built-in breadcrumb to quickly find recently visited items.
• Bookmarks dropdown and quick access.
• Dark mode support (THEME_DARKMODEENABLED option).
• Custom login page.
• Multicompany compatible (entity selector in the top menu).
• Responsive display adapted to different screen resolutions.

✅ Compatibility

• Dolibarr: 19 to 23
• PHP: 7.1 or higher (depending on the Dolibarr version in use)
• Designed to integrate with the standard Dolibarr interface

🔧 Installation

The MBI theme is made of two parts:

• a theme (to be placed in htdocs/theme/)
• a module (to be placed in htdocs/custom/)

Both are required for the theme to work properly.

1. Copy the content of htdocs into your Dolibarr htdocs folder (the mbi theme goes into htdocs/theme/, the themembi module into htdocs/custom/).
2. Go to Home > Setup > Modules/Applications.
3. Activate the Theme MBI module. The module automatically activates and forces the theme.

⚠️ Warning:

• Activating the theme without the module will cause display bugs.
• Changing the Dolibarr theme once the module is activated may also cause display bugs.

📄 End-user License Agreement

The Theme MBI module is edited by MB Informatique SARL (SIRET: 83434236200029), whose head office is located at 120 rue de l'île Napoléon 68170 Rixheim FRANCE - Tel.: 03 67 262 242. This End-user License Agreement legally frames the use of the services of the Theme MBI module.

MB Informatique SARL declines all responsibility for any viruses that may infect the User's computer equipment after use or access to this module.

The total guarantee of data security, integrity, and confidentiality, whatever it may be, is not guaranteed by MB Informatique SARL.

MB Informatique SARL cannot be held responsible for its use outside the legal framework.

This contract is valid for an indefinite period. The beginning of the use of the module's services marks the application of the contract with regard to the User.

👨 Publisher

Theme MBI is a custom Dolibarr theme developed by MB Informatique.

It was designed for organizations that want a modern, pleasant and professional Dolibarr interface, without giving up Dolibarr's standard features and usability.

Publisher: MB Informatique
Contact: info@mb-informatique.fr
Website: https://www.mb-informatique.fr
 

Module version: auto
Publisher/Licence: MB Informatique / GPL-v3
User interface language: English, French
Help/Support: MB Informatique
Prerequisites:

• Dolibarr min version: 19.0.0
• Dolibarr max version: 23.0.x
   

💻 CHANGELOG

Version 2.0.0

Global hardening, bug fixing, modernization and display improvements. Validated for Dolibarr 19 to 23 and PHP 7.1 to 8.2. Rendering stays unchanged by default (except fixed bugs); the new visual features are options.

Security

• Fixed an unauthenticated SQL injection (notifications_manager.php) and an SQL injection (livesearch.php): authentication enforced, parameterized queries, escaping, entity scoping, CSRF token.
• Fixed a reflected XSS in the top-bar "print page" link (menu.lib.php).
• Removed an arbitrary class instantiation (admin/setup.php).
• Escaped previously unescaped output (login message, OpenID URL, setup values, etc.) and added the CSRF token to notification AJAX requests.
• Post-audit hardening pass: fixed a potential stored XSS in the notifications dropdown (event label now escaped); added escaping on the third-party / user name (top bar) and on the "About" page back link.
• Live search (livesearch.php): added user-permission checks — a user without read rights can no longer enumerate third parties, products, proposals or events (only isModEnabled was checked before).

Compatibility (Dolibarr 19 → 23, PHP 7.1 → 8.2)

• Replaced deprecated APIs with the modern helpers (getDolGlobalString/Int, isModEnabled, hasRight) throughout the module and the theme.
• Hook ActionsThemeMBI made PHP 8.2-compatible (declared properties, #[\AllowDynamicProperties]).
• Login page fixed (removed the 404 jstz.min.js, backtopage field, getLoginPageExtraContent hook, captcha refresh control).
• Guarded unset $_SESSION / $_GET / array accesses (PHP 8.1+ warnings); PHP minimum raised to 7.1.

Bug fixes

• The theme JavaScript no longer throws when the top-bar user link is absent (e.g. login page).
• Misc fixes: $eventID short-ternary, broken HTML (<select>, </h6>), Tools menu condition, out-of-bounds array read, truncated THEME_SATURATE_RATIO, invalid no-op CSS.
• Top search bar: it sent the legacy sall parameter (ignored since Dolibarr 14) instead of search_all, always landing on an unfiltered list; fixed (the list is now filtered, or redirects to the record when there is a single match).
• Notifications: the "read" marker is now per user; it was shared across the whole entity, so one user reading or clearing their notifications hid the unread notifications of the others.

UI / theme rendering fixes

• Lists: horizontal scrolling restored; "choose columns" dropdown fully visible; column-picker icon and "select all" checkbox now side by side; column-title row greyed to stand out from data; search bar vertically recentred and (multiselect) filter placeholders no longer truncated.
• Object tooltips (getNomUrl) working again (jQuery UI / Bootstrap clash resolved, opaque background, brought to front).
• Popups: close-button cross visible again and styled to match the theme.
• Thirdparty form: ticking "Customer" / "Vendor" no longer distorts the labels.
• "Create" action dropdown on cards (order, invoice…) working again.
• "More..." tab on cards (the overflow menu grouping the extra tabs, e.g. on the module builder): its dropdown no longer opened; fixed — opens on click, with scrolling for long lists.
• Date picker (calendar) multilingual: it showed in English and mm/dd/yyyy whatever the language; now correct in every language (names, format, first day of week).
• Left menu: redundant "Members" / "Subscriptions" entries hidden; "Third parties" home link added; scrolling fixed down to the last menu.
• Breadcrumb overhauled: covers all modules (not only thirdparty/proposal/order/invoice), current object highlighted (only while on its own page) and placed on the right, per-user history, background matched to the search bar, click the home icon to clear it.
• Module home pages: widget blocks better spaced.
• Loading-overlay delay reduced (~420 ms → ~150 ms per page).

New options (module setup)

• Striped (zebra) rows in lists and configuration tables — off by default.
• Bordered tables: light frame + row separators (lists and configuration) — off by default.
• Breadcrumb show/hide — on by default.

Maintainability

• Removed dead code, de-duplicated code, completed README (French and English).
• Translations added in German, Spanish and Italian (and their regional variants): the module is now translated in 14 languages.
• Fixed the declared minimum Dolibarr version (13 → 16, the real floor of the APIs used); added GPL license headers to the files that lacked them; removed unused translation keys; dropped the leftover apexcharts.min_old.js from the package.

Version 1.2.x

• Multicompany compatibility (entity selector in the top menu).

• Kanprospects compatibility.
• ApexCharts update.

Version 1.0

• Initial version.