Jump to content

Few suggestions

Featured Replies

Posted

General suggestions
1- Vulnerabilities report section available for customers only. Im sure a few of IPB members have some knowledge in web security and would report new things (0days) on a private area that can be fixed quick before turning public.

IPBoard wise
1- clone forums feature (its a must) with all it's settings and permissions. like we have with clone a member group
2- iphone and android customizable applications (skin and board name etc). vBull has them and i honestly think it is an awesome idea. IP needs to think about this 2 applications as a step towards new technologies. tablets and smart phones are here to stay and a mobile skin is not enough

IPNexus wise
1- add a fully customized payment gateway. Sometimes might not even be a real payment gateway but just some message to contact personally the seller/author (at least last time i checked this wasnt available)

IPContent
1- This application has a lot of potencial but i think somehow is getting forgotten by IPb and by all the users that don't really have php and other languages knoledge cause its really hard to develop something for it if you dont do have enough knowledge. So everybody is really limited to the hooks that are made public by other dev's. I honestly thing that application should be way more user friendly, with a bunch of templates (blocks) that can be modified/optimized on a GUI or something close to that


more to come. will keep this topic updated with new ideas


General suggestions


1- Vulnerabilities report section available for customers only. Im sure a few of IPB members have some knowledge in web security and would report new things (0days) on a private area that can be fixed quick before turning public.




Love that idea

2- iphone and android customizable applications (skin and board name etc). vBull has them and i honestly think it is an awesome idea. IP needs to think about this 2 applications as a step towards new technologies. tablets and smart phones are here to stay and a mobile skin is not enough




They are releasing new mobile applications along with 3.3. I am pretty sure one of the reasons they reworked the application was so they they could reintroduce white-labeled applications. I would think that information about this will be coming out in the near future.
  • Author

I hope they do. its awesome. I didnt have the chance to read what's new on 3.3 mostly cause i usually wait a couple months to upgrade my board. Mostly cause it takes some time till all mods and apps i use along with IPB get updated as well.
i updated first post as well


1- clone forums feature (its a must) with all it's settings and permissions. like we have with clone a member group




This is coming in 3.3 :)

IPContent


1- This application has a lot of potencial but i think somehow is getting forgotten by IPb and by all the users that don't really have php and other languages knoledge cause its really hard to develop something for it if you dont do have enough knowledge. So everybody is really limited to the hooks that are made public by other dev's. I honestly thing that application should be way more user friendly, with a bunch of templates (blocks) that can be modified/optimized on a GUI or something close to that




This may be what you are looking for:
  • Author

another awesome new feature would be the possibility to add categories and forums on different tabs.
like have 2 or 3 or 10 tabs on IPB menu, and categories and forums on each of those tabs.
cool for communities that have all different kinds of sections and need to keep all that separated without having to scroll down for 10 minutes to get to the bottom of the forum

Regarding #1, we have that in place already... it's called submitting a support ticket :) The rest of your list... most of those have been covered above as well. :)

However the best place for feedback is in our feedback forums here > http://community.invisionpower.com/forum/297-feedback/

  • Author

support tickets are private between support and that specific user.
not good enough
example yesterday i submitted a XSS vulnerability to IPB staff.
i have fixed it and guess it will be fixed on 3.3 but what about all other customers that are using 3.2 and are not aware of that vuln?

IPB posts security patches for all major security issues. Having a forum where all security issues are posted would be horrible since it would only take 1 user handing out that information for 1,000s of websites to be compromised.

If you wish to report a vulnerability to us it should be reported via a support ticket. You don't even need an account - you can simply email accounts@invisionpower.com to do this.

If your goal is to alert all users of a vulnerability, then your interest does not lie with privately telling us about the issue so it can be fixed. There are third party sites such as secunia where you can post vulnerabilities in any software for the whole world to see.

Naturally, we *prefer* that a user tell us directly, in private, so that we can patch a security issue first.

  • Author

i guess you somehow misunderstood what i said.
im not interested on any advertising.
im interested on having forum secure. not just mine but also all other IPB customers.
like i mentioned before....i have fixed my forum. what happens to all the other thousands of customers?
answer from IPB was we will fix it on next release 3.3
not good enough once again
and yes my concern is not just warn IP but also all other customers so they can fix themselves if they can do it.

i agree that vuln disclosures would bring some stress to IP staff and everything else evolved, but would bring to us (customers) the certainty that vulnerabilities would be fixed as quick as possible and not on the next release, like i was told.
nothing better than some pressure to have satisfied customers. Unless IP simply just do not care if thousand of forums are running atm with vulnerabilities that can easily be patched.
also think about this, if that vuln is not advertised here (within IPB community) and things are kept hidden from public holding a fix for 2/3 weeks or 1 or 3 months this can be achieved on any other web security website like exploit-db and the pressure is going to be even bigger, forcing IP to a quick response. am i right?

but i can understand its a delicate issue and i will respect the idea that is not a good suggestion for you guys

  • Management

We release security updates between releases as needed depending on the severity of the issue. We actually just released one recently. Sometimes a fix may be very low impacting so we don't do a special patch or the temporary fix we present in a ticket to a client will need to be researched more before it can be released to our many thousands of clients.

We take security seriously though. Keep in mind we use our own software and host thousands of communities that we must manage :)

  • Author

just tried 3.3 and i dont see ANY of the suggestions
am i missing something here?
no clone forums/categories, no navegation tabs with forums and categories, no nothing
is this being kept hidden untill offcial release?

IP.Board:
- We've added the ability to clone permissions when you're setting up a new forum.
- We have new apps in the pipeline, which we'll discuss in more detail soon

IP.Content:
- We've added a new feature called block templates, which enables you to download and use ready-made widgets
- We've also improved multiple screens in the app to make them easier to use

Navigation:
- Also in IP.Content is a menu maker which lets you add menus and tabs to the navigation at the top (like the Client Resources menu here)

  • Author

Thank you.
I guess i will have to wait for tabs with categories and forums on some future release on IPBoard then.
Thanks once again.

Archived

This topic is now archived and is closed to further replies.

Recently Browsing 0

  • No registered users viewing this page.