This is our January maintenance release.
Key changes include:
- Added Bluesky embedding and share links.
- Added Postmark integration.
- Downloads: Added permissions to custom fields.
- Backblaze B2 support.
Core
Events
- Added support for Bluesky post embedding.
- Added Bluesky & TikTok Social Profile theme links.
- Added Bluesky content sharer.
- Added support for Postmark email handling.
- Added a security protection to prevent malicious actors from exploiting the Service Worker.
- Fixed X sign-in button colors.
- Fixed a niche issue where template caching can throw an error.
- Fixed an issue with password fields where the advice popup may be duplicated.
- Fixed an issue where unread items can appear as read in the notifications list.
- Fixed the wrong string length check in the quick title edit feature.
- Fixed an issue where the report type field would appear even if there was only 1 report type.
- Fixed an issue where AdminCP search would search too often, now waits for you to stop typing.
- Fixed an issue where registrations could be broken if the geolocation check failed.
- Fixed an issue where editing the title via AJAX wouldn't update the search index.
- Fixed the missing language string in the confirmation dialog when a report was rejected or completed.
- Fixed an issue sending mail via SMTP.
- Fixed SMTP emails sending the wrong hostname for EHLO/HELO commands.
- Fixed an issue where Club Activity was displaying incorrect data.
- Fixed the v5 preparation check to take only QA forums into account, instead of QA forums and also the solved topics setting.
- Fixed an issue where Club Activity was displaying incorrect data.
- Fixed an issue where Club Activity was not including Pages Categories in Clubs.
- Fixed an exception with Content Widgets when using Items with no container class.
- Fixed an issue where the club members tab wasn't shown to club moderators.
- Fixed an issue where Moderators could see inaccessible content titles in the IP Tools.
- Renamed 'Facebook Pixel' to 'Meta Pixel'.
- Removed an unnecessary </li> tag in the editorAttachmentsPlaceholder template.
- Removed Guests must complete CAPTCHA setting - guests will always need to complete CAPTCHA if enabled.
- Deprecated Sendgrid API support.
Blogs
- Fixed an issue where the ACP permission to manage venues wouldn't work.
- Fixed an issue where the calendarEvent_rsvp webhook wasn't fired when somebody clicked on "Leave event" inside the RSVP box.
Converters
- Fixed a minor mistake in the REST API Records endpoint documentation.
Downloads
- Fixed an issue where the converters ACP page could time out when connecting to the source database fails.
- Changed the gallery image rebuild task to rebuild only 1 image per cycle.
Commerce
- Implemented support for permissions on Custom Fields.
- Added custom fields to the Downloads API responses.
Forums
- Fixed an issue where members trying to register would see a " Subscriptions are not available" error when subscriptions were disabled.
- Fixed an issue where users had a link to reactivate the purchase but could not actually reactivate.
- Fixed an issue where child purchases are marked as active when the parent purchase has expired.
- Fixed an issue where Stripe was not receiving customer information for new members.
Pages
- Fixed an issue where the unapproved posts icon is hard to see on hot topics in the topic listing.
- Fixed an issue where 'popular now' badges won't be instantly removed when disabling the feature.
Platform
- Fixed an issue where the ACP Overview Statistics showed the total comment count of all comments instead of for each database.
- Fixed an issue where RecordFeed widgets could not be embedded outside of Pages.
- Fixed a minor mistake in the REST API Records endpoint documentation.
- Fixed a broken link on the analytics page.
- Fixed an issue where unsupported image types would not be held/blocked according to Action to take if scan fails setting.
Changes affecting third-party developers and designers
- Updated HTMLPurifier to 4.18.0.
- Updated Whoops to 2.16.0.
Key Changes
This is our November security and maintenance release.
Key changes include:
- Report Center updates.
- Email notification when dormant accounts sign in.
- SEO Improvements.
- Hot Topic updates for Cloud customers.
- Updated share link functionality (click to copy).
- Prepare for v5 - A new AdminCP page to ensure you will be able to use v5.
- Content Spam analysis enabled for all Cloud customers.
Additional Information
Security
Core
- Fixed a potential stored XSS issue, thanks to Colonel_mortis for reporting.
Events
- Added a default timeout for the SMTP connection.
- Added Message-ID generation for SMTP emails, for compatibility with SMTP servers that do not follow the RFCs.
- Added email notification for users signing in to dormant accounts.
- Added a requirement for CAPTCHA to be enabled for guests to use post before registering.
- Improved IndexNow error logging.
- Improved consistency with share links popups and added click to copy URL.
- Improved the Report Center, adding new functionality and improving the user experience.
- Optimised deleting member content.
- Fixed an issue where changing a primary or secondary group for a member wouldn't reset the cached value.
- Fixed an issue where permanently deleting content from the ModCP-Report Center would fail. . Fixed a wrong path in the robots.txt file.
- Fixed an issue where deleting nodes could throw an error.
- Fixed an issue where some club containers could throw an error.
- Fixed an issue where member profiles could be broken if a member had an invalid group.
- Fixed an issue where search can be slow on very large communities.
- Fixed an issue where the member history may show a wrong "by" name.
- Fixed an issue where the diagnostics statistics settings wouldn't save successful.
- Fixed an issue with the admin stream settings, where the "Active Members" Setting wouldn't be saved.
- Fixed an issue where the clubs widget could throw an error when a custom field filter for a deleted field is being used.
- Fixed an issue where creating a stream in the ACP wouldn't show all available nodes.
- Fixed an issue where streams could not always be sorted correctly.
- Fixed an issue with Firefox, where one couldn't break out of the quote box by pressing enter twice.
- Fixed an issue in the core-webhooks documentation.
- Fixed an issue where automatic moderation rules couldn't be created if there were no report types.
- Fixed an issue where the s3 deletion task wouldn't be enabled.
- Fixed an issue where promoted Comments could not be removed from Promoted Content.
- Removed the deprecated hive task.
- Removed the ping call to the deprecated Google Sitemap Service.
Commerce
- Replaced the h2 header on the landing page with an h1 element.
Gallery
- Added Canonical URLs for /store and /subscriptions.
- Added robots.txt rule to block ?currency= (currency changer links).
- Updated the code to support the new MaxMind API version.
- Fixed an issue where subscriptions with no expiration threw an error when calculating upgrade cost.
- Fixed an issue where multiple currencies could be set as the default.
- Fixed an issue with reactivating purchases.
Downloads
- Fixed an issue where moving images from an album wouldn't rebuild the total images count.
Forums
- Fixed an issue where editing the member restrictions would throw an exception when downloads app was enabled.
Pages
- Optimised topic summary for busy communities.
- Fixed issues with JSON-LD/Schema.org markup in Q&A mode.
- Fixed an issue where publishing a future topic manually wouldn't update the topics publish date & time.
- Fixed an issue where approving a topic may not immediately update the number of topics pending approval.
- Fixed an issue where archived posts were not included in the post counts.
- Fixed an issue where topics you have posted in are not always marked with a star.
Courses
- Fixed an issue where creating comments via REST wouldn't show the comment when comments were synced with forum posts.
- Fixed an issue where records from club categories were showing in feeds incorrectly.
- Added a description field to the Club Category form.
- Fixed an issue where the club name was not displaying in feeds for club records and comments.
- Fixed an issue where Map fields were showing on the form for non-Address fields.
Platform
- Fixed an issue where the quiz questions were missing the formatting while taking the quiz.
Converters
- Enabled content Spam Analysis, can be disabled via AdminCP > Smart Community > Spam Analysis.
- Improved hot/popular topics for Cloud customers; Added ability to disable.
- Added ability add Live Topics to Club Calendars and convert to Club Forums.
- Fixed an issue where Polls are not converted correctly during SMF conversions.
Changes affecting third-party developers and designers
- Updated PHPUserAgent to 1.0.9.
- JSON-LD BreadcrumbList now includes the breadcrumb for the page being viewed.
- Redis now uses a reader for lRange.
- Optimised fetching online user list when using Redis.
Core
Forums
- Added new prune setting for failed requests in API logs.
- Improved the efficiency of unread content streams when using MySQL 8.
- Improved performance when replying to a content item or create a content item.
- Fixed possible error when using the DataLayer with PII as well as Single Sign on.
- Fixed issue with deleting secondary group using the REST API.
- Fixed an issue where Censor Block may allow HTML tags to be used in the preview even though they are not stored in the database.
- Fixed an issue where group promotion may move the member back to the default group if MySQL is temporarily unavailable.
- Fixed an issue where the results count was always 0 for Hidden Content in the ModCP
- Fixed an issue where certain saved charts were not showing.
- Fixed an issue where broken modlog data could break the topic view page.
- Fixed an issue where it was possible to toggle online status without multi-factor authentication.
- Fixed an issue where OAuth PKCE values may not persist in some situations.
- Fixed an issue where some very old topics would not show the "I posted in this" star.
- Fixed an issue with notifications on comments that did not account for anonymous posting.
- Fixed an error on the Manage Promoted Items page when an application is disabled.
- Fixed an issue which happened while warning a member.
- Fixed an issue where the content widget was showing the tags option for all content types, even if they weren't implementing tags.
- Fixed an issue where a service worker may not work if your site is not accessible to guests.
- Fixed an issue where deleted an application wouldn't remove the data from the core_javascript db table.
- Fixed an issue on the moderators permission page.
- Fixed an issue where the REST API (with API key) would not return a last activity date for anonymous members.
- Fixed an issue on Cloud where large Member CSV imports would inadvertently trigger human verification.
- Removed CommunityHive integration.
- Removed ability for pending-validation registrations changing their email address to avoid a race condition.
Commerce
- Improved performance when rebuilding statistical data for forum topics.
Courses
- Added a new prune settings for Commerce related member history.
- Fixed an issue where upgrading subscriptions did not always update the expiration date.
- Fixed an issue where support request URLs would be sent to IndexNow.
- Fixed an issue where some support requests were not properly linked to a member account.
- Fixed an issue where some billing agreements were not properly linked to purchases.
- Fixed an issue where changing the club owner could fail for paid clubs.
Calendar
- Fixed an error that could occur when viewing badges that had been assigned for completing a course.
Pages
- Fixe dan issue in the upcoming events widget where club events would be shown even if they shouldn't.
Platform
- Fixed an issue with the RSS Feed widget, where the cache expiration time would be overwriten by the custom rss widget cache time.
- Removed the 'Popular Now' widget, use 'Trending Content' instead.
Changes affecting third-party developers and designers
- Added new _setLastComment() method to nodes.
- Added new \IPS\Node\DelayedCount trait.
- Other performance improvements included related to search index and content statistics.