Releases XenForo 2.2.16 Released Full Nulled By XnForo.Ir 2.2.16 Patch 2

Firstly, to clarify some concerns that have arisen:

1. If you did a normal upgrade (either uploading files or via your admin control panel) you do not need to manually edit any files to receive the security fixes.

2. If you upgraded to the initial 2.2.16 release, you are fully protected against the security issues that were being addressed.

Secondly, a second patch is being released to address some minor bug fixes that may not have been correctly applied when upgrading to XenForo 2.2.16. This is only applicable if you performed a normal upgrade to 2.2.16, and this patch is not security related or affected by the security fixes.

You can download that now from your customer area or perform a one-click upgrade through your admin control panel. You can go to Tools > Check for upgrades in order to see the second patch release.

If you are running XenForo Cloud, the fixes have been applied automatically.

Some of the changes in XF 2.2.16 include:

• Fix some issues with xf-dev:class-use-function to better support classes with class attributes and comments, or existing use function declarations.
• Fix persistent action indicator when using back/forward navigation
• Add _deleteFromSource method to support performing tasks right before entity deletion
• Skip logging IPs when updating avatars during registration
• Fix docblock return hint for \XF\Util\Ip::checkIpsAgainstBinaryRangeList
• Add missing security locked phrase
• Expose additional parameters to the reported_thread_title phrase
• Ensure sticky threads are passed to the fetchExtraContentForThreadsFullView method
• Adjust the phrasing of mail encryption options
• Update purchase requests on user merge
• Set aria-label for tooltips with no children
• Skip processing email bounces and unsubscribes when email has been disabled in config.php
• Gracefully handle errors when editing bookmarks
• Clean up temp files after job completion
• Add proper ordering to the shared IPs tab
• Add an index hint to the newest members widget
• Avoid generating invalid SQL with XF\Db\Schema\Column::values()
• Prevent disabled accounts from using the admin control panel
• Include a plain confirmation URL in the email sent to users awaiting email confirmation

Hot on the heels of yesterday's XF 2.2.14 release and subsequent patches, we are today making XenForo 2.2.15 available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo 2.2 upgrade to this release to benefit from increased stability, particularly if you already upgraded to XenForo 2.2.14.

As of this point, XenForo 2.2.14 and its patches are no longer available for download. We are still planning a final XF 2.2 release at some point around the release of XenForo 2.3!

Some of the changes in XF 2.2.15 include:

• Avoid setting duplicate List-Unsubscribe headers.
• Include first post QA schema items unconditionally.
• Make outdated PHP version notice in admin control panel clearer.
• Retain the original unsubscribeEmailAddress option for backwards compatibility.
• New unsubscribeEmailHandling option to replace the new unsubscribeEmail option and conclusively fix issues arising from yesterday's XF 2.2.14 release.
• Fix URL unfurls no longer unfurling.

Current requirements​

Please note that XenForo 2.2 has higher system requirements than earlier versions.

The following are minimum requirements:

• PHP 7.0 or newer (PHP 8.2 recommended)
• MySQL 5.5 and newer (Also compatible with MariaDB/Percona etc.)
• All of the official add-ons require XenForo 2.2.
• Enhanced Search requires at least Elasticsearch 2.0.