Security Update

This is an important security update that should be applied as soon as possible.

Thank you to Aria Akhavan, @Colonel_mortis , Lucas Brönner for reporting some of these issues.

Please see the full change log for further details

Will there be an updated dev tools for 4.7.26?

1 minute ago, sudo said:

Will there be an updated dev tools for 4.7.26?

Yes, I'll do this tomorrow morning.

Wait you backported the online users change without it being mentioned in a security update?!?!

Edited Monday at 10:16 PM2 days by sudo

4 minutes ago, sudo said:

Wait you backported the online users change without it being mentioned in a security update?!?!

It's #10238 which is the title from the Pull Request. I have updated it to make it clearer though.

Unfortunately, Redis SORTs in v4 continued to cause issues so we had backport this change to ensure platform stability.

The edit is better, I understand for cloud it being needed potentially as its your servers, its just disappointing to have it affect us who (currently) dont use redis.

I have followed the discussion in the other threads so I dont want to replicate here, just to say our online list was permissions locked and never public so it got no traffic besides me using it for spotting anomalies. Its a pity the admincp online list didnt have a lot of the functions for admin use. I do actually find it incredibly useful when you are monitoring one site.

Edited Monday at 10:28 PM2 days by sudo

Hello all,

I don't know this is the right place to put my question. I tried to update our forum to 4.7.26 but this failed. I get the message that the update file not could be uploaded to our server. I have to download the package und upload it myself and then press the button continue.

I have done this but get then the message "There are no applications available to upgrade".

I have upload the zip Invision Community.zip to the folder "forum" and unpacked there. Now there is a new folder with the name ips_c9780.

Please can you give me a help to solve this problem?

Moste regards, Walter

You have uploaded the full folder, instead of uploading the folders contents

Also, if you look at /uploads/logs/ you might have some logs with the date and 'extractfailure' in the filename.

These may provide more information about why the automatic upgrade failed.

@ Mark: Thank you for your response. So, if I understand correctly, I need to move the contents of each folder found in the update package into the corresponding folder within the forum software on the server, overwriting the existing content. After that, I have to click the "Continue" button.

@ Stuart: Thank you for your response. This is the content of the log in the folder upload/logs:

<?php exit; ?>

Tue, 10 Nov 2026 12:08:14 +0000

Exception::0

Could not list the files in the zip

#0 /home/ssangyon/public_html/forum/admin/upgrade/extract.php(643): Extractor->extract()

#1 {main}

This in the error log in the upgrade folder:

[10-Nov-2026 12:08:14 Europe/London] PHP Warning: unpack(): Type V: not enough input values, need 4 values but only 0 were provided in /home/ssangyon/public_html/forum/system/3rd_party/pclzip/pclzip.lib.php on line 4394

[10-Nov-2026 12:08:14 Europe/London] PHP Warning: Trying to access array offset on false in /home/ssangyon/public_html/forum/system/3rd_party/pclzip/pclzip.lib.php on line 4397

Any idea what caused this?

Moste regards, Walter