Jump to content

kysil

Members
  • Posts

    519
  • Joined

  • Last visited

Reputation Activity

  1. Thanks
    kysil reacted to Mark for a blog entry, 4.3: Sign in from other sites using OAuth   
    The best way to convert guests into members is to make the onboarding process as simple as possible.
    Over the years, we've added special log in methods for Facebook, Google, LinkedIn and Microsoft. We've carefully hand coded these integrations to allow guests to sign up with just a few clicks using services they're already a member of.
    These services used to use proprietary methods to link with other websites, but a new standard has emerged.
    OAuth
    You may not know it, but you're probably familiar with OAuth already. If you have enabled the ability for users of your community to sign in with their Facebook, Twitter, Google, LinkedIn or Microsoft account, you may have noticed that the process for setting up each of these is quite similar. This is because they all use the OAuth protocol.
    In Invision Community 4.3, we are introducing several exciting new features:
    In addition to all of the existing social networks above, which retain their "easy setup" status, we have also added Wordpress. Users on your community can now sign in with any Wordpress site you control (you will need to install a Wordpress plugin to enable OAuth capabilities). As well as those "easy setup" options, we have also added the ability for you to allow users on your site to sign in with any OAuth 2.0 based provider. This means, for example, if your community is based in a location where other social networks are popular, if they use OAuth, you can set those up too. While the setup is a little bit more complicated, this doesn't require any custom programming - you'll just need to find out a few more pieces of information from the provider (an example is provided below). Invision Community itself can now also serve as an OAuth 2.0 server so you can set up other sites to be able to facilitate logins using credentials from your community. This works in conjunction with our REST API, allowing you to make API calls as an authenticated member, which will return just the information that user has access to. With the ability for Invision Community to serve as both an OAuth server and client, this now provides standard integration for multiple Invision Communities together, which will now replace the old IPS Connect feature. We have also taken this opportunity to make a few other minor tweaks to login, registration and account management features, especially for communities which rely heavily on non-standard login methods (more details below).  
    Setting Up a Custom OAuth Provider
    For this example, I'm going to use vk.com, which is a popular social network in Europe. While Invision Community doesn't provide this as one of the "easy setup" options, it is based on OAuth 2.0 so we can use the new functionality in Invision Community 4.3 to set it up.
    In older versions, the list of login handlers in the AdminCP had all of the providers listed with enable/disable toggles - because now you can add as many custom handlers as you like in 4.3, it's now a list where you can add/delete options:

    Login Handlers List
    When clicking the "Create New" button, you'll see all of the different handlers Invision Community supports. Since vk.com isn't in the list, but is still OAuth 2.0-based, I'll choose the "Other OAuth 2.0" option:
     
    Choosing a Login Handler
    You'll now need to use the documentation provided by the site you want to integrate with to fill out this form. While no custom programming is required, the documentation is usually quite technical in nature - but you only need a few key pieces of information. We anticipate that for some of the more popular options, guides will be provided to help you find the information you need.
    I have created an application in vk.com's developer center and so I will copy and paste my credentials into the form:

    Inputting vk.com credentials
    I then need to find the endpoints from vk.com's documentation and input those too.

    Inputting vk.com endpoints
    Next I need to find the endpoint where I can access the user's information within their API and the parameters they are returned by. The only required piece of information is an ID, but you can also provide the parameters for accessing the display name, email address and profile photo. If display name/email address isn't available/provided, the user will be asked for this the first time they sign in. vk.com's API doesn't provide access to the email, but I can use the screen name as the display name, and they do provide access to the photo:


    Inputting vk.com User Information Endpoint and response parameters
    Finally, provide a logo and a color for the sign in button and some final settings:

    Inputting vk.com Logo and Button Color
    And now vk.com login is set up. A button will now show up on the front end which I can use to sign in. I didn't provide a way to access the email address, so on the first sign in, the user will be prompted to provide that, but the screen name and profile photo from vk.com will be used:

    Signing in with vk.com
     
    Using Invision Community as an OAuth Server
    You can also set up Invision Community itself to be an OAuth Server. This may be useful for two main reasons:
    If you want to integrate two communities together, or integrate with something else which supports adding custom OAuth clients. If you are a developer and want to use the REST API using OAuth for authentication rather than an API Key. You can either make requests as an authenticated user (by obtaining an access token) or using Client Credentials. The screenshots below show the full capabilities which are quite technical and mostly aimed at developers. If you will just use this feature to link two communities, don't be concerned if it looks too complicated, an easy-to-follow guide will be available to achieve that.
    You will set up the clients from the AdminCP:


    Setting up an OAuth Client
    When creating the OAuth Client, you can control which scopes are available, and which endpoints of the REST API they provide access to:

    Defining OAuth Client Scopes
    The login process is then the standard OAuth flow, and users have the ability to view authorisations in the account settings:

    Authenticating an OAuth Client
    The REST API has new and updated endpoints to be aware of the authenticated user:

    A new REST API endpoint which returns details of the currently authenticated user

    An updated REST API endpoint which, when called using OAuth authentication, will only return data the authenticated user has access to
     
    Other Login System Tweaks
    Users can now choose if they want to change their local display name or email address if it is changed by an external login method (or the administrator can choose this behaviour). If there is an issue with this (for example, it wants to change the email to one that is already taken), or profile photo syncing, this is now better communicated to the user. You can now control per-login-handler if new registrations are allowed using it. This addresses some confusion from previous versions as to if the "Allow New Registrations" setting applies to accounts being created by social network logins. The Standard login handler can be disabled if you rely totally on an alternate login method. To allow this to happen:  All areas where a user is prompted to re-enter their password (some areas of the account settings) now allow reauthentication using any login handler. You can disable local registration but still allow accounts to be created by other login handlers, or redirect users to an external URL to register an account. You can also disable or redirect to an external URL for changing email address / password or the Forgot Password tool. You can now create multiple instances of the external MySQL database and LDAP login methods which have also had some other minor tweaks: The external MySQL database handler now has PHP's password_hash() function as an available option for password encryption type, and defining a custom encryption method is now much easier, done entirely in the AdminCP without needing to modify PHP files. You can now choose if changes to the local display name / email address / password is synced back to the external database / LDAP database. You can optionally show these handlers in the Account Settings pages like other login handlers to allow users with an existing account to link their accounts. You can define a Forgot Password URL for the external database which the user will be redirected to if they try to use the Forgot Password tool and that is how their account is authenticated. 
  2. Like
    kysil reacted to Matt for a blog entry, We're now using Invision Community 4.3!   
    Cue the music; switch on the dramatic lighting, we've got fantastic news!
    We're now running Invision Community 4.3 on here for some advanced testing before we unleash the first beta release.

    There's a subtle hint above
    If you need a recap of what was added, take a look at our product updates blog which takes you through the highlights.
    As this is a pre-beta release, expect some funkiness as we scurry around and tidy up our custom theme wrapper and other areas as we spot them.
    If you you find a bug, we'd love for you to report it with as much detail as you can muster in the bug report area.
    We'd love to know what you think, let us know below.
  3. Like
    kysil reacted to Matt for a blog entry, 4.3: Promote to Facebook Pages and Groups   
    Social media promotion should be a part of any marketing strategy. Curating interesting content from your community and sharing to social media channels like Facebook and Twitter is a great way to drive traffic to your site.
    Invision Community 4.2 introduced Social Media Promotions to allow this. 
    You hit the promote button, fill out the text to share with each service, click which photos to include and schedule the promotion or send it immediately.
    We use this feature almost every single day to share highlights to our Invision Community Facebook page and Twitter.
    This feature has had a significant impact in attracting visitors to our blog. This is now a core part of our marketing strategy.
    So what's new in Invision Community 4.3?
    Facebook Groups and Pages
    A  popular feature request was to allow sharing to Facebook groups that you are an administrator of, as well as Pages you own.
    Not only that, but we now allow you to share to many places at once.
    When setting up Facebook, you can choose which Facebook properties to be used when promoting.

     
    When sharing content, you can choose where to share it to right on the dialog.

     
    Here you can see that we're sharing to two of three possible places. "It's a secret" is a Facebook Group (which makes it a pretty poor secret).
    The "Lindy Throgmartin Fan Club" is my favourite page on all of Facebook. What it lacks in members, it makes up for in enthusiasm.
    You may also notice that the Facebook box is empty. Facebook have very strict guidelines on sharing content. They prefer that you do not auto-populate the content.
    You can always access the item's original content on the promote dialog, so you can refer to it.
    Setting a custom page title
    When you share to social media channels, you also have the opportunity to add to the 'Our Picks' page.
    We've made it possible to add a custom title for the Our Picks page so you don't have to use the content item title, although this is still the default.

     
    Editing an Our Pick
    When editing an item shared to 'Our Picks', you now have the option of editing all the data, including the title and the images attached.

     

    The Our Picks page showing the custom title
    Thanks to your feedback, we saw several places that we can improve this already popular feature.
    We hope you enjoy these changes which makes your social promotion strategy even easier to execute.
    I know we'll be making good use of them!
     
  4. Like
    kysil reacted to Mark for a blog entry, 4.3: AdminCP Member Profiles   
    Viewing and editing a member is probably one of the most frequently used features of the AdminCP. With the design unchanged for many years, and the tabbed interface starting to grow unwieldy, it was due for some love. We have not only dramatically improved the design but added many new features.

    New AdminCP Member Page
    Let's look at some of the improvements:
    Easy Toggle between Member and Customer View
    If you have Commerce installed, you can now toggle between "Member View" (which shows the screen above) and "Customer View" (which shows the current customer page in Commerce with the user's purchases, invoices, etc.). This makes it much easier to view all of a member's information in one place.
    If you don't have Commerce installed, the top tab bar will not show.
    Basic Information
    The pane in the top-left shows the member's basic information like name, email address and photos. You can now reposition a member's cover photo and crop the profile photo (functions previously not available in the AdminCP). To change the display name or email address, you just click and hold on the information and a textbox appears. The buttons below allow you to merge, delete, sign in as, and edit the preferences or password for the member.
      
    Basic Member Information Pane
    In addition, this pane lists any social networks the user is logged in with. It shows you the member's profile photo and profile name on that network (for example in this screenshot, it is showing my Facebook profile's photo and name) and for many networks you can click on this to be taken directly to their Facebook/Twitter/etc profile. You can also edit the syncing options for the method and unlink the accounts, features which weren't available previously.
    If you have Commerce installed, there is also an indicator if the user has an active subscription.

    A member with an active subscription
     
    Alerts
    If a member is validating, banned, flagged as a spammer, or locked, a large banner will display drawing your attention to this. For validating and banned, it will explain exactly what the status is (for example, if they haven't responded to the validation email yet versus they are awaiting admin approval, or if they have been banned manually versus are in a group without permission to access anything).

    A member that has been locked



    Other possible alerts
     
    Locations & Devices
    This pane shows you, on a map, all of the locations the user has been when using the community (based on their IP address) as well as the IP address they used to register and most recently.

    IP Address Locations
    While the devices tab shows the most recently used devices.

    Recently Used Devices
     
    Content Statistics
    Right in the middle of the profile you can see some statistics about the member's activity. This includes:
    A sparkline graph of their recent content. Their content count and reputation count (with tools to manually change or rebuild). A breakdown of the amount of content they have made across all applications. A visual indication of how much of their messenger and attachment storage they have used. If Gallery and Downloads are installed, the existing statistics overview provided by these apps are also available here.
    Content Statistics
    Warnings & Restrictions
    This block shows recent warnings on the account, and also highlights if any restrictions (i.e. content moderation, restricted from posting, or application-level restrictions) are being applied, which previously was difficult to see at a glance.

    Warnings & Restrictions Block for an account which has content moderation in effect
     
    Account Activity
    On the right is a pane which shows all of the latest account activity. While this was available in previous versions (called "Member History") we have made some significant improvements:
    The number of things that get logged has been significantly expanded. We now log photo changes, group changes, when a new device is used to login, if an account is locked (by failed logins or failed two factor authentication attempts) or unlocked, password/email/display name changes, when a user links or unlinks a social network login method, initial registration and validation, merges, being flagged/unflagged as a spammer, receiving/acknowledging/revoking a warning, restrictions being applied, two factor authentication being enabled/disabled/changed, an OAuth token being issued if Invision Community is being used as an OAuth Server, enabling/disabling receiving bulk mails, and accepting the privacy policy / terms and conditions, as well as all of the Commerce-related information that is already logged. Much more information is now shown such as who made the change (i.e. an admin, the user themselves, or if it was changed by the REST API or syncing with a social network) and how the change was made (for example, for a password change - if the user used the "Forgot Password" tool or changed it in their Account Settings) and what the data was before and after. This includes being aware of if the change was made by an admin after using the "Sign in as User" tool. You can now filter what information you are seeing to quickly find what you are looking for.
    Recent Account Activity
     
    Extensibility
    The new profile has been designed with extensibility in mind. Third party developers can easily add new blocks our even entire new tabs. Any apps/plugins which are currently adding a tab to the "Edit Member" form will retain backwards compatibility with their tab continuing to appear when clicking the "Edit Preferences" button in the basic account information pane.
  5. Like
    kysil reacted to Matt for a blog entry, 4.3: Welcome to the future, blog!   
    Good news!
    We've taken Invision Community's Blog app by the scruff of the neck and dragged it into 2018!
    There has been a growing trend for imagery to play a very important part of a blog entry. This update reflects that.
    Introducing Grid View
    We have added a new view that shows your blog entries as cards with space for a cover photo.
    We've very visual creatures, and a good photograph can entice readers into your blogs to read more. 
    As you would expect, you can disable this mode from the Admin CP for purists that prefer the traditional list format.

     
    For those who's sense of adventure runs deep, the new grid mode allows you to show a list of latest blog entries as the blog home page.

     
    This puts valuable and engaging content right in front of your audience.
    This list view persists when you view a blog's entries giving a consistent feel.

     
    Viewing an entry
    We've given the blog entry page a little make-over by featuring the cover photo above the content. The slimmed down blog details bar allows your audience to focus on the content.

     
    Default Cover Photos
    You may have spotted that entries without a cover photo have a rather fetching geometric pattern in different colors.

     
    This is a new micro-feature of Invision Community 4.3. Currently, if you do not have a cover photo on a blog, profile or event, the bar is a rather sad shade of black.
    The new default cover photo feature makes it much more cheerful. Here's what a profile looks like.

     
    Much better.
    Here's a few technical details for those that love to know all the things.
    The grid view feature can be turned off in the ACP (but doing so will make me very sad) You can choose the default home page view: Latest Entries or List of Blogs. You can still view a list of blogs when you're on the latest entries page. This choice is stored in a little cookie (GDPR friendly, it doesn't contain any identifying data) so navigating back gets you the last view you chose. Let us know what you think! We love it, and hope you do too.
  6. Like
    kysil reacted to Charles for a blog entry, Invision Community 4.3   
    We are happy to announce the new Invision Community 4.3 is available!
    Some highlights in Invision Community 4.3 include...
    Improved Search
    We now support Elasticsearch for scalable and accurate searching that MySQL alone cannot provided. There are also enhancements to the overall search interfaces based on your feedback.

     
    Emoji
    Express yourself with native emoji support in all editors. You can also keep your custom emoticons as you have now.

     
    Member Management
    The AdminCP interface to manage your members is all new allowing you easier control and management of your membership.

     
    Automatic Community Moderation
    You as the administrator set up rules to define how many unique member reports a piece of content needs to receive before it's automatically hidden from view and moderators notified.

     
    Clubs
    The new Clubs feature has been a huge hit with Invision Community users and we are expanding it to include invite-only options, notifications, exposure on the main community pages, paid memberships, and more.
    Custom Email Footers
    Your community generates a lot of email and you can now include dynamic content in the footer to help drive engagement and content discovery. 
    New Gallery Interface
    We have reworked our Gallery system with a simplified upload process and more streamlined image viewing.
     
    The full list follows. Enjoy!
    Content Discovery
    We now support Elasticsearch which is a search utility that allows for much faster and more reliable searching. The REST API now supports search functions. Both MySQL and Elasticsearch have new settings for the admin to use to set search-defaults and default content weighting to better customize search logic to your community. Visitors can now search for Content Pages and Commerce Products. When entering a search term, members now see a more clear interface so they know what areas they are searching in and the method of search. Member Engagement
    Commerce can now send a customizable account welcome email after checkout. You can whitelist emails in the spam service to stop false-positives. REST API has many enhancements to mange members. Ability to join any OAuth service for login management. Invision Community can now be an OAuth endpoint. Wordpress OAuth login method built in. Support for Google's Invisible ReCaptcha. Groups can be excluded from Leaderboard (such as admins or bot groups). All emails generated by Invision Community can now contain admin-defined extra promotional text in the footer such as Our Picks, and Social Links. Admins can now define the order of Complete Your Profile to better control user experience. Clubs
    Option to make a Club visible but invite-only Admins can set an option so any Club a member is part of will also show in the parent application. So if you are in a Club that has a Gallery tab then those image will show both in the Club and in the main Gallery section of the community. Club members can now follow an entire Club rather than just each content section. There is a new option on the Club directory page for a list view which is useful for communities with many Clubs. If you have Commerce you can now enable paid memberships to Clubs. Admins can set limits on number of Clubs per group. If a group has delete permission in their Club, they can now delete empty containers as well. Members can ignore invitations. Moderation and Administration
    Unrestricted moderator or administrator permission sets in the AdminCP are visually flagged. This prevents administrator confusion when they cannot do something as they will be able to quickly see if their account has restrictions. You can choose to be notified with a new Club is created. Moderators can now reply to any content item with a hidden reply. Download screenshot/watermarks can now be rebuilt if you change settings. Support for Facebook Pixel to easily track visitors. Moderators can now delete Gallery albums. Automatic moderation tools with rules to define when content should auto-hide based on user reports. Totally new member management view in AdminCP. More areas are mass-selectable like comments and AdminCP functions for easier management. New Features
    Commerce now has full Stripe support including fraud tools, Apple Pay, and other Stripe features. Commerce packages can now have various custom email events configured (expiring soon, purchased, expired). Full Emojii support in the editor. Complete overhaul of the Gallery upload and image views. Announcements system overhaul. Now global on all pages (not via widget) and new modes including dismissible announcements and top-header floating bar option. Many new reports on traffic and engagement in the AdminCP. Blog has new view modes to offer options for a traditional site blog or a community multi-member blog platform. The content-starter can now leave one reply to Reviews on their item. Commerce now makes it much easier to do basic account-subscriptions when there is no product attached. Useful Improvements
    Forums has a new widget where you can filter by tags. If tags are not required, the tag input box now indicates this so the member knows they do not have to put in tags. Member cover photos can now be clicked to see the full image. Any item with a poll now has a symbol on the list view. Twitch.tv embed support. You can now update/overwrite media in the Pages Media Manager. Mapbox as an additional map provider to Google Maps. Technical Changes
    Direct support for Sparkpost has been removed. Anyone currently using Sparkpost will automatically have their settings converted to the Sparkpost SMTP mode so your email will still work. Your cache engines (like Redis) will be checked on upgrade and in the support tool to ensure they are reachable. Third-party applications will now be visually labeled to distinguish them from Invision Community official applications. The queued tasks list in the AdminCP is now collapsed by default as queued tasks are not something people need to pay much attention to during normal operations. When upgrading from version 3 series you must convert your database to UTF8 and the system saves your original data in tables prefixed with orig. The AdminCP now alerts you these are still present and allows you to remove them to reclaim storage space. On new installs there are now reasonable defaults for upload limits to keep people from eating up storage space. Categories in all apps (forums, gallery albums, databases, etc.) no longer allow HTML in their titles. This has been a concern both in terms of security and usability so we were forced to restrict it. Large improvements to the Redis cache engine including use for sessions. The login with HTTPS option has been removed and those who were using it will be given instructions to convert their entire community to HTTPS. Images loaded through the proxy system now honor image limits for normal uploads. We now consider BBCode deprecated. We are not removing support but will not fix any future issues that may come up.
     
    There's a lot to talk about here so we are going to lock this entry to comments so things do not get confusing. Feel free to comment on upcoming feature-specific entries or start a topic in our Feedback forum.
     
  7. Like
    kysil reacted to Mark for a blog entry, 4.3: Express yourself with Emoji   
    Emoji: built in to Invision Community 4.3! ?
    Invision Community has a long history. We remember the early days of forums, back when graphical "emoticons" or "smilies" were added.
    We have always shipped our products with a basic set of emoticons with the ability to add your own images and has supported emoji from mobile devices.
    Emoji has become a standard across mobile and desktop devices so it made sense to bring them to Invision Community fully.
    You can choose from 3 different styles of Emoji:
    The native style provided by the user's operating system (if you choose this option, users on different platforms will see different styles) Twitter style EmojiOne style
    Emoji Settings
    Once you have chosen one of these options, all of the available Emoji will show in the emoticons selector when making a post. Unlike in older versions, the entire list is scrollable (the categories drop down will jump you to the category rather than filter), you can search, and standard Emoji features like skin tone modifiers are fully supported, and of course, you can make them as big as you like.

    Navigating Emoji

    Skin Tone Modifier

    Make Emoji any size
     
    Autocompleting Short Codes
    In addition to using the selector, you can also use optionally enable standard :short_codes:. These will be autocompleted as you type.

    Autocompleting Short Codes
    You can also enable more conventional ASCII emoticons to be automatically replaced too:

    ASCII Short Codes
     
    Don't Worry: Custom Emoticons Aren't Going Anywhere!
    You can use custom emoticons either instead of, or even alongside Emoji. If you give your custom emoticons a text replacement starting and ending with : they will even show in the autocompletion alongside Emoji.

    Custom Emoticons
     
    Technical Details 
    Whichever style you choose, Emoji is stored in the database as the actual Unicode characters, so you can even change the setting and all Emoji, even those in existing posts, will immediately change.
    If you choose to use the native style (so the Emoji will match the style provided by the operating system), the system will automatically detect which Emojis are supported and the selector will only try to show the ones the platform can render.
  8. Like
    kysil reacted to Matt for a blog entry, 4.3: Automatic Community Moderation   
    One huge benefit of running your own Invision Community is the moderation tools.
    Out of the box, Invision Community allows you to turn members into moderators. Better still, you can define what these moderators have permission to do.
    Part of this moderation suite is the report system. The report system allows your members to flag posts that need a moderator's attention.
    There comes a time when your community is so successful that it can be a little tough to keep up with all the content and reports.
    Community Moderation
    This new feature leverages your member reports to automatically remove objectionable content from public view.
    You as the admin will define thresholds for the content. For example, you may say that to hide content, a post needs 5 reports.
    This reduces the workload for your moderators and enables you to crowd source moderation.
    Let's take a look at this feature in a little more detail.
    Reporting Content
    When a member reports a piece of content, they now have the option to set a type, such as "Spam" or "Offensive". These options can count towards the threshold. Once the threshold has been passed the item is hidden.

    The threshold can be set up by creating rules in the Admin CP.
    Admin Set Up
    At its heart of the system are the rules. You can create custom rules in the Admin CP to determine the thresholds.

    For example, you may decide that:
    A member with less than 10 posts only needs 5 reports to hide the content.
    But you may want to give more experienced members a higher threshold as there is more trust.
    You simply add a new rule:
    A member who joined over a year ago with over 500 posts needs 10 reports to hide content.
    You can do that easily with the rules system as it will scan them all and pick the one most suitable for this member.

    It's as simple as that.
    Notifications
    Once an item has received enough reports to match the threshold, it is automatically hidden from view.

    A notification is sent to all moderators who opt in for notifications. This notification shows inline in the notifications center.

    It can also optionally be sent via email for those who want to know without checking the site.

    Restoring the content
    Of course, a moderator may decide that the content is fine and un-hide it. Once a piece of content has been un-hidden, automatic moderation will not hide it again.
    Report Types
    Depending on your community, the default types may not be suitable or relevant. You may also want to set up other report types.

    You can do this via the Admin CP.
    Preventing Abuse
    Your first thought may be that a single member can report a single item multiple times to force content to be hidden. 
    The system will only count a unique member as one point towards the threshold. This means a single member can report an item 5 times, but they are only counted once towards the threshold.

     
    You can also set a time limit between reporting the same item. This will prevent a member reporting a single item multiple times in succession.

    Of course, the member can delete their report if it was in error.

    Report Center
    The Report Center is the hub for all reported content. Invision Community 4.3 adds a filter to view a specific report type. The reports themselves also show the type of report.

    We hope that this new feature will be a huge help and time saver for you and your moderators.
    We'd love to hear your thoughts, please let us know what you think and if you have any questions.
  9. Thanks
    kysil reacted to Matt for a blog entry, Build a fortress: stop spam in your community   
    We all know what a pain spam can be. We deal with it daily in our inboxes often relying on clever software to filter it out for us. Even worse, some spam is so well disguised that it can fool you into thinking it is a genuine message.
    You've put in the hard work with your community. You've used the built in social promotion tools and SEO features to get it noticed. Now that it's indexing well with Google, you've become a target.
    Invision Community has several tools in its arsenal to deal with spam leaving you free to concentrate on your members and content. We'll take a look at these tools in more detail.
    First, it's important to know that there are two main types of spam. Computer generated and human generated.
    Computer generated spam is malicious software that throws millions of messages out and hopes some sticks to high profile communities.
    Human generated spam is more pernicious as it can often bypass automated measures. Human spammers often register accounts and post as members on your community.
     
    The first line of defense
    Invision Community comes equipped with Spam Defense. This is free with all cloud and licensed plans. Spam Defense harnesses the combined knowledge of thousands of Invision Communities. It will assess the potential threat of each new user and stop them before they can cause any problems.
    To date, Spam Defense has blocked over 3,000,000 spam accounts.
    Spam Defense works by evaluating the registering member against its database. It will score the account from 1 (not a spammer) to 4 (a known spammer) allowing you to decide what to do with each level.
     

    If a spammer gets past the Spam Defense, flag them as a spammer using the built in tools. This will clear up all their posts in a single action and report back to Spam Defense that this account has spammed your site. These community led reports allow Spam Defense to learn and adapt.
     
    Preventing spammers from registering
    The CAPTCHA ("Completely Automated Public Turing test to tell Computers and Humans Apart") is a well tested and robust method to defeat computerised spammers. It is usually a small widget on a sign up form that asks you to re-enter words shown in an image.
    Invision Community supports Recaptcha2 by Google, meaning that in most cases your users don't even have to type in random letters. Instead, Google algorithms determine if the user is human or otherwise. Invision Community supports KeyCaptcha. This requires guests to solve a simple problem before they can contribute.

     
    The Question and Answer challenge works on its own or in conjunction with a CAPTCHA. This system allows you to create simple question and answer challenges unique to your community. As these answers are unique, computerized spammers cannot solve them. Also, human spammers not knowledable with your niche are often unable to solve them too.
    While the above are great for reducing the number of computerized spammers, we need to be especially clever to weed out human spammers.
     
    Dealing with human spammers
    Smart configuration of your community will also help in defeating spammers. Invision Community supports posting without registering. This feature allows for fast engagement but use it with caution. It works best if you only allow it for specific forums.
    Invision Community's membership promotion system also has tools which you can leverage.
    To make your site less appealing to human spammers, you can configure two membership groups. Let us look at an example which uses "New Members" and "Members".
    "New Members" is the default group for new registrations. In this group you can remove the ability to add a signature to each post. Often spammers use signatures to earn referrals on links.
    You can also define a limit for posts per day. This will throttle the number of spam posts a member can make.
     

    Now that you have your "New Members" group set up to build trust, you can promote them using Group Promotions.
    A good strategy is to promote them to "Members" when they have reached a certain level of reputation. This shows that they have become a trusted member of the community.
    You may wish to promote them a week after joining knowing that spammers usually leave after a day or so.
    There are many different criteria you can use allowing you to tailor it for your own needs.
     
    Summary
    Dealing with spam is a reality for every successful community. Invision Community has several features to mitigate its impact.
    Through leveraging its built in tools to smart configuration, you can make your community a fortress against spam. In addition, our exclusive Spam Defense system grows and learns every day stopping spammers from registering.
    To learn how to configure Invision Community's spam prevention tools, please see our help guide.
    Not using Invision Community? We can convert you from other platforms preserving your data. Our migration page has more information on the platforms we can convert you from.
  10. Thanks
    kysil reacted to Charles for a blog entry, Invision Community 4.3 Coming Soon   
    Our recent release of Invision Community 4.2 was the most well-received version ever! The feedback we received on new features like Clubs, Reactions, and Promotes was better than we could have hoped and we really enjoyed seeing all the creative uses as people implemented them on their own communities.
    We have been hard at work on version 4.3 with a goal of improving on all the great new features. It is well under way and we are happy to able to start announcing what's new over the next few weeks.
    Invision Community 4.3 will not only contain new features but also have a core focus on refinement from 4.2's new features. You will see many improvements to Clubs, new integration options, large application improvements, new promotional features, and more changes large and small.

     
    You can expect to see news posts about new features and changes very soon with a release date in early 2018. Follow our news section or subscribe to our newsletter to receive updates.
  11. Haha
    kysil reacted to Rikki for a blog entry, 6 reasons why you shouldn't just settle for a Facebook group community   
    Whether you run an existing community or are taking tentative first steps into setting up an online community forum around your brand, an important choice you need to make is between social networks like Facebook or having a community you own and control.
    Let's take a look at the benefits of an owned community versus a Facebook group - as well as how you can still use Facebook (and other social media platforms) to your advantage.
     
    You own your data
    The biggest point to consider when using Facebook groups is that you do not own your own data. Facebook owns it and does not even allow you direct access to it. If you decide later to move to a different platform, need to run reports to extract meaningful insights, or otherwise work with your community data: you are out of luck.
    In contrast, with an Invision Community, your data is your data. You can use it in any way that makes sense for your goals; be it analyzing trends, sending promotions to users, or generating reports and statistics. We never hold your data hostage and there's no fee to get it.
    Beyond owning the data, you also control how it's used and presented. Facebook is notorious for changing algorithms for when (or even if) people see your posts. When you run your own community the experience for your and your users is in your control.
     
    Branding opportunities
    This is a big one. An owned community gives you the tools you need to make your community a seamless part of your user's interaction with your business. This naturally includes your brand styles (your logo, colors, site navigation and so on) but also your community web address (URL). With an owned community, your URL will be easy to find - customers normally opt for something like forum.yourname.com or community.yourname.com. 
    Users will have more confidence that they're in the right place, and more closely associate your community and your message with your brand.
    Emails sent out by your owned community can also carry your branding, consistently reinforcing that connection between your business and your community.
    And, of course, when users share content from your community to Facebook and other social networks, they're sending users directly to your website where you have the opportunity to lead with your most important call to actions.
     
    More control over user experience
    All Facebook groups are, essentially, the same experience and yet your business needs almost certainly aren't the same as every other. One size doesn't necessarily fit all when it comes to community!
    When you control your own community, you have the ability to control your user's experience. Need to show specific types of data in specific places? You can do that (and more) with Invision Community's easy to use Blocks feature. Need to create a custom community application to serve as a resource center for product support? You can do that too.
    Another huge benefit of this control is that, unlike a Facebook Group, users won't be seeing ads and 'recommended content' from competing businesses and communities. With user attention being pulled in so many directions these days, the last thing your community needs is for users to leave because Facebook has suggested a competitor!
     
    No barriers to monetization
    Not all communities require a monetization strategy. In many cases, the community is part of a larger customer relationship strategy rather than a revenue-generating destination in its own right.
    But for those communities that do plan to monetize, options with a Facebook group are at best difficult to act upon, and at worst practically non-existent.
    In contrast, Invision Community gives you the opportunity to explore monetization strategies that work for you. These might include paid subscription plans (a particularly attractive option for fan club communities), traditional advertising through Google AdSense and other networks, or sponsorship deals with other businesses that might be relevant to your members. Invision Community has tools for each of these approaches built in, allowing you to start monetizing with minimum fuss.
     
    Fine-grained permission controls
    Facebook groups struggle to reflect the real-world roles that staff members play in your organization, limiting your choices to 'administrator' or 'moderator'. And the same is true of users, too - your options for recognizing different levels of user (such as VIPs, or brand ambassadors) are limited.
    Invision Community is different. Since you are creating and configuring each member group, you can precisely control who can see what, and how they are recognized within the community. You can even sync these roles via Single Sign-On (SSO) making setup and assigning users to groups painless.
    For staff groups, you can limit access to key community functions based on roles or responsibilities, ensuring access is granted on an as-needed basis only.
    For users, you can get creative and find a group structure that works best for your specific needs. For example, support communities often find that recognizing the most knowledgeable and helpful members with a new member group (complete with elevated permissions) is a great way of engaging users.
    And finally, with this control over access, it's very easy to create restricted areas of the community. Whether you want to create a private subforum that staff can use to coordinate tasks or a file repository that's only available to subscribers, Invision Community can achieve it.
     
    You can still reap the Facebook benefits
    Setting up your community within Facebook's walls might not be the best approach for you. That doesn't mean you should ignore Facebook, however. On the contrary, it's an influential platform and there's a very good chance your users are already using it.
    Invision Community offers a number of tools that allow you to benefit from Facebook while avoiding the drawbacks we discussed. We'll go into more detail on utilizing social media in a future article, but to summarize:
    Invision Community features social sign-in options, enabling users to register and log in using their existing social media accounts, substantially reducing onboarding friction. Content can promoted by staff back to your social network pages, automatically and on a schedule you decide. Invision Community supports automatic embedding of a wide number of social networks (and other services), allowing users to share their favorite Facebook and Twitter posts and spark a whole new conversation - but this time in your community.  
    Summary
    When you are creating an online community for your business or hobby it is important to think about your goals and future growth by choosing a platform that is there to work for your needs.
    When you establish your community on Facebook, you're helping to grow someone else's business (including, potentially, your competitors!) and hoping that some of those spoils fall to you. With an owned community, the rewards of your hard work belong to you and your business alone.
    Invision Community has been enabling users and businesses to communicate online since 2002, and we're proud of our reputation as a platform that puts control in your hands. Contact us if you'd like to discuss how we can help you too.
     
  12. Thanks
    kysil reacted to Mark for a blog entry, New: Authy Integration   
    This entry is about our IPS Community Suite 4.2 release
    In 4.1.18 we added Two Factor Authentication. Already in 4.2 we have announced a new setting to trigger 2FA when logging in from a new device, and in 4.2 we are also adding Authy as an authentication handler.
    Authy can send a user a text message, make a phone call, or send a push notification to a smartphone app to authenticate the user. You can enable whichever of these options you like.
     
    Set Up
    To set up Two Factor Authentication with Authy, the user will enter their phone number. To verify their phone number they will then enter a code shown in the Auhy app or have a code sent by text message or phone call. The system will automatically show an appropriate interface based on what options you have enabled - for example, if you don't want to enable the app as an option, it will not reference Authy.

    Setting up Authy with the app available as an option

    Setting up Authy with just phone or text message options enabled
     
    Verification with Authy
    When the user needs to verify their account, the system will automatically show an appropriate interface. If you allow verification with the Authy app and either it is the only option you allow, or the system knows that the user has installed the Authy app, the system will prompt them to use the app. This can either be done using Authy's OneTouch option (where the user will receive a push notification to the app, and when they click approve, the screen will automatically refresh) or their SoftToken option (where the user will be instructed to open the Authy app and enter the code they see). If you allow authentication by text message and/or phone call as well, the user will also see options for using those instead.
    These screenshots show the process for OneTouch authentication:

    The user is shown a waiting screen
     
    Simultaneously they will receive a push notification and when opening it be able to approve
    Once the user has approved, the waiting screen will automatically refresh with the user authenticated.
    For SoftToken authentication, the user is prompted to enter the code shown in the Authy app:

    Authy SoftToken option
     
    Phone Verification
    If you have disabled the Authy app as an option, or the user does not have it installed, they will be prompted to choose from the available options how they want to authenticate.
    These screenshots show the process for authenticating by text message:

    The user is asked how they want to authenticate

    The user receives a text message or phone call with a code

    The user enters this code to authenticate
     
    Management
    If the user changes their phone number they can reconfigure the system in their account settings. The system automatically shows "Phone Verification" rather then "Authy" if the app is not available as an option.

    Account Settings showing Authy as Phone Verification
     
  13. Like
    kysil reacted to Matt for a blog entry, New: Promoting Content   
    There are many strategies for growing your community, such as newsletters, mailing lists and advertising on other sites.
    IPS Community Suite 4.2 puts a new tool at your disposal: promotions.
    There’s no denying the popularity of social media. Worldwide, Facebook has 1.86 billion users active monthly. Every day, millions of people are using Facebook to speak with friends, to talk about their interests and to find new people to connect with.
    Of that 1.86 billion people, a good portion of those are actively discussing topics your forum covers. There is a huge opportunity to tap into social media to join in the discussion and to promote your community and provide a venue to carry on the discussion.
    For a while, we’ve had social media log in extensions, which means that your users can sign into your community simply by clicking a relevant button. We’ve also had the ability to share things to a personal Facebook account. These tools are great for your users, but how do they help you, forum owner?
    IPS Community Suite 4.2 introduces a way to promote your content directly to your brand’s Facebook page and your brand’s Twitter account.
    You can curate fun and engaging topics and share them. The workflow is simple. Simply browse your community and queue up interesting topics, comments, gallery items, blog posts or database articles for posting throughout the day to your brand’s social media accounts. You choose the schedule, the hashtags and the wording to send.
    Let’s look at the feature set in more detail.
    Your first stop is to set up the feature from the admin panel. The system will guide you through the necessary steps of connecting your Facebook and Twitter accounts. Once Facebook has been set up, you can select any page that you are an administrator of on Facebook.
     

    The admin panel also offers scheduling options and permissions.
     

    You can pre-set the times for when content will be posted. Facebook and Twitter both have analytic tools to determine when your visitors are most frequently online. A good tip here is to set the time to a slightly odd number, so 11:45am is better than 12:00pm as you are likely to catch the attention of someone waiting for lunch, or a lunchtime meeting.
     

    You have full control over who can promote items to your social media accounts. You can specify by group or pick individual members who may not be in those groups.
    Now that you’ve set up the backend, we can get promoting.
    Each item, that is a topic, gallery album, blog entry or article has its own Promote button.

     
    Each post and comment can also be shared individually, which is an easy way to share great content your visitors add to existing conversations.

     
    Clicking this brings up the sharer.

     
    This is where you can customize the text that is sent out to each social media channel. You’ll also notice space to promote this item within your own community in addition (or instead of) Facebook or Twitter, we will explore that shortly.
    The sharer is smart enough to pull attachments already added in the post, and you can upload your own images to be sent. Generally, shared items that have an image get better organic reach than just text alone so you’ll almost always want to choose or add an image. Twitter can use up to 4 images, and Facebook allows 1000 pictures per album, but you’ll never want to upload that many!

     
    Once you’ve filled out your content and picked your images, you can schedule the promotion. Generally, you’ll want to use the auto schedule option as this allows you to just stack up multiple items and let the auto scheduler post the items according to your pre-set schedule. You can also set a specific date and time if you are looking to run a promotion or other time sensitive event.


    The promoted content viewed in Facebook and Twitter
    It’s easy to see the status of your queued and sent items from the moderator view.

     
    This area allows you to see previous promotions and modify pending promotions.
    Earlier, we mentioned that the system has the ability to promote content internally. Promoting items to your own community lets you, the community manager, curate interesting items and comments and present this to your community. This is a great way to allow your visitors to explore content you think they’d enjoy.

     
    Promoting content to your community via Our Picks also allow you to promote content if you cannot or choose not to use social networks. It has the advantage that social networks do not have over a community platform like IPS Community Suite: consistency. The content on your community is always there whereas a social network is all about right here right now. Miss it and you miss out. On your community you can engage and re-engage a subject all you want. 
    Of course, we’ve built a widget that you can drag and drop to most pages to make this curated list more visible.
    IPS Community Suite 4.2 gives you, the site owner and community manager the tools you need to reach out and engage new users already discussing the topics on social media your community covers. With single click sign in and the built in retention functionality the suite offers, you’ll have a powerful way of growing your user base. It furthers that goal by created a list of that promoted content for continual reference and promotion for visitors already on your site.
    We’ve got lots more to discuss on this subject, and in the coming months we’ll be putting together some guides on social media best practices and how to leverage Facebook’s excellent post promotion / pay per click tools to further boost your site’s visibility to social media users.
    We’re here to help you make a success of your community and to give social media users a venue for when they outgrow Facebook.
  14. Like
    kysil reacted to Rikki for a blog entry, New: Clubs   
    This entry is about our IPS Community Suite 4.2 release.
    We are happy to introduce the next major feature that will be available in IPS Community Suite 4.2 - Clubs.
    Clubs are a brand new way of supporting sub-communities within your site. Many people have requested social group functionality in the past and Clubs are our implementation of this concept. Let's take a look at a few screenshots, and then go over what they are capable of doing.

    The Club directory

    A Club homepage

    Club member listing

    Example of content within a club (topics, in this case)
    There's a lot to digest there! Let's go over the basic functionality.
     
    Club Types
    Four types of club are available:
    Public clubs
    Clubs that anyone can see and participate in without joining. Open club
    Clubs that anyone can see and join. Closed club
    Clubs that anyone can see in the directory, but joining must be approved by a Club Leader or Club Moderator. Non-club-members who view the club will only see the member list - not the recent activity or content areas. Private club
    Clubs that do not show in public, and users must be invited by a Club Leader or Club Moderator As the site admin, you can of course configure which club types can be created and by whom. You could, for example, allow members to create public and open clubs, but allow a "VIP" group to also create Closed and Private clubs.

    Admin configuration option for Club creations
     
    Club Users
    Each club has three levels of user:
    Leader
    A leader has all of the permissions of a moderator, and can add other moderators. They can also add content areas (see below). The club owner is automatically a leader. Moderators
    Moderators, as the name implies, have the ability to moderate content posted within the club. As the site administrator, you can define which moderator tools can be used. You could, for example, prevent any content being deleted from clubs, but allow it to be hidden. Moderators can also remove members from a club. Users
    Anyone else that joins the club.
    Defining the moderator permissions available to club moderators
    Your site administrator and moderators, with the appropriate permissions, are able to moderator content in any Club regardless of whether they are a member of it. 
    Clubs can be created by any user who has permission. As you would expect, this is controlled by our regular permission settings.
    For closed clubs, there's an approval process. Users can request to join and the request must be approved by a leader. Leaders get a notification when a user requests to join; the user gets a notification when their request is approved or denied.

    Approving and declining join requests
     
    Club Content
    Club Leaders can add a variety of content areas to their club - forums, calendars, blogs and so on. It's important to note that these content areas are fully functional just as if they existed as a top-level admin created area. They will appear in search results, activity streams, users can follow them, embed links to them, and so on. If a user has permission to see a forum (for example) within a club it will behave exactly like other forums they see - and the same for all other kinds of content.
    Each content area a leader adds can have a custom title, and will appear in the club navigation. This means, for example, that you can have multiple forums within a club, and give each a different name.

    Adding content areas to a club
     
    Club Custom Fields
    Clubs also support custom fields. Custom fields are defined by the site administrator and can be filled in by Club Owners. The values they enter are shown (along with the club description) on the club homepage.

    Custom fields in a club
    On the Club Directory page, users can filter by the custom club fields.

    Filtering clubs
     
    Club Locations
    Clubs have built-in support for Google Maps, allowing users to specify a physical location for their club. Let's say you run a community for car enthusiasts; each club might be tied to a particular region's meetup. The Club Owner specifies the location when setting up the club, and clubs are then shown on map on the directory page:

    Club locations
    And within a club, the location is shown too:

     
    Club Display
    We offer two ways to display club headers within the club - the standard way, shown in the screenshots you've seen up to this point, but we also have a sidebar option. This is something the admin sets globally for the site, rather than per-club. This is useful where your site design doesn't facilitate another horizontal banner taking up valuable screen real-estate; moving the club banner to the sidebar alleviates this pressure on vertical space.

    Sidebar club style
    Using Clubs in Other Ways
    There's a lot of scope for using clubs beyond allowing users to create their own groups. You do not even have to call them "clubs" if that does not suit your use case. For example, on a company intranet you could rename Clubs to "Departments", and create a private group for each of your main roles. This would allow each department to have its own community, with its own forums, gallery, file sharing and so on, private and separate from other departments.
    Similarly, they'd also work well in situations where you as the site admin want to create entire micro-communities. Take for example a video game publisher. Using Clubs, they could create a micro-community for each of their games, complete with forums, galleries and so forth, and then set the Clubs directory as their overall community homepage. Immediately, they have a setup that hasn't until now been possible out-of-the-box with IPS Community Suite.
     
    We expect our clients will come up with some really innovative uses for the new Club functionality, and we can't wait to see what you do. We'd love to hear your feedback - let us know what you think in the comments.
  15. Like
    kysil reacted to Rikki for a blog entry, New: Reactions   
    This entry is about our IPS Community Suite 4.2 release.
    IPS Community Suite has long had a reputation system; first we had a simple up/down system, later updated to introduce a Likes system as an alternative. Whichever system you chose to use, it tied in with our reputation system.
    We're pleased to introduce the latest updates to the reputation system, and it's something that has been requested for quite some time: Reactions.
    Quite simply, reactions allow users to offer more fine-grained sentiments towards content than a simple up/down or 'like'. They are now in common usage on social networks, and so users expect to be able to be more nuanced in their response to something they see.
    Let's see how they work in a post, and then cover the options you'll have available.

    What you see above is the default setup for a site that has used the Like system in version 4.1. We include 5 reactions by default:
    Like Thanks Confused Sad Haha If you currently use the older style up/down reputation system, don't fret - you'll still get the new reactions on upgrade, but they'll be disabled by default and instead the new reaction UI will show up/down reactions. This gives you the flexibility to decide which of the new reactions, if any, you want to allow.
    So, those are the basics - but what configuration options can you expect to see? First, you can of course add your own reactions! We expect that beyond the default reactions you'd expect to find, some sites will want reaction types specific to their use-case. On an intranet, you might want to have 'agree' and 'disagree' reactions for staff to use when responding to discussions. On a gaming community, you might replace the icons to be some graphic from a video game that means something to your particular userbase. There's a wealth of possibilities.
    Each reaction you set up can be configured to adjust the original author's reputation count - a reaction can be positive (i.e. award a reputation point), negative (i.e. subtract a reputation point), or neutral (i.e. leave the reputation count unchanged). Our default set won't include any negative reactions, but you are free to configure these and new reactions to suit your own use-case. A user's total reputation count is still shown alongside their content and in their profile, of course.
    If you don't want to use the new reactions for whatever reason, you can disable all of them except Like, and it'll behave just the like 4.1-and-earlier system:

     
    Sites that currently use the up/down system don't show a list of names of users, and instead show an overall reputation score for the content. With the new reaction system, you can enable this even if you don't use up/down reactions. This is great if you plan to use reactions as, for example, an agree/disagree system, or where the content score is more important to your site than the individual reaction types.

    How the reaction UI looks with the 'count only' setting enabled
    As you'd expect, you can click individual reaction counts (or the overall reputation score, if you enable that setting) to view who reacted to the content. This remains a permission setting that you can apply per-group.

    On touch devices, on-hover functionality is not suitable, and so for these devices the reactions UI looks like this:

    Reactions play well with all areas of the suite, including Recommended Replies:

    ...and activity streams...

    ...and a couple of places we aren't quite ready to reveal yet  
     
    We hope you're looking forward to this new feature as much as we are. It's already been a hit on our internal testing site, and we're looking forward to seeing how clients customize it for use on their own community.
    Developer note: Reactions are one of two new features (the other currently unannounced) so far that make use of PHP Traits.
  16. Like
    kysil reacted to Andy Millne for a blog entry, New: Calendar Venues   
    This entry is about our IPS Community Suite 4.2 release.
    Following on from our previous news entry "Add Similar Event" we are pleased to announce another feature that will make adding and discovering new events as easy as possible.
    Support for geographic event locations has been in Calendar for some time now but with 4.2 we have taken this a step further with venue support. When enabled, members can set the event location from a list of pre-defined venues. Address details and maps will then be automatically shown in the event view.

    Event view shows the venue map and address as well as a link to other events at the venue
    Additionally, a link will be added so that other events occurring at this venue can be discovered.

    Venue view shows all events at the location
    Venues can be added via the admin control panel or inline when adding events (for users with permission)

    ACP venue management

    Inline adding of venues when adding events
    If a venue has not already been added then a fallback to the standard address form input is provided.
    We have a few more Calendar improvements still to reveal so be sure to follow News & Updates for further announcements.
  17. Like
    kysil reacted to Charles for a blog entry, IPS Community Suite 4.2 Coming Soon   
    We are well into development on IPS Community Suite 4.2 and are excited to start announcing all the new features and improvements.
    Our next big release is focused on engagement with your members. You will see enhancements to our Reputation system, new ways to encourage people to register on your community, and enhancements to existing features to make them more interactive. There are also entirely new capabilities we cannot wait to show you ranging from new ways to organize content to tools to help promote your community.
    Version 4.2 also features a refreshed AdminCP and default front-end design. Theme changes in 4.2 are mostly in the CSS framework so your existing themes will either work without issue or require minor changes to work in the new version.
    Over the next several weeks we will be posting news entries with previews of upcoming features fairly often. Be sure to follow our News section, our Facebook, or Twitter to stay up to date.
    We expect IPS Community Suite 4.2 to be out in mid-2017 with a public preview available sooner.
    Everyone at IPS has worked very hard on this update and we think you will love it!
  18. Like
    kysil reacted to Mark for a blog entry, New: Device Management   
    This entry is about our IPS Community Suite 4.2 release.
    One of our more technically-oriented features for 4.2, we have added more detailed logs of user logins, and the devices and IP addresses used. This brings several new features:
     
    Notification of a new device sign in
    If enabled, users can receive an email notification when a new device is used to log into their account:
     

    Email sent when a login from a new device is detected
    When a user signs in for the first time, a special key is set to recognise the browser on subsequent logins. This mean the notification email does not trigger on a new IP address, which would be annoying when travelling or if using a network where the IP address changes regularly. Instead, the notification is only triggered if someone signs into your account from a new physical device or web browser.
     
    UserCP Device Management
    If enabled, a new page will show in the user's settings page showing all the devices which have been used to log into their within the last 90 days (which is recent enough that could still be logged in if "Remember Me" was checked).

    Recently Used Devices
    Users can see the device, browser, physical location (obtained by a GeoIP lookup) and if applicable, how the login was processed (for example, if the sign in was with Facebook or Twitter, this will show). If they chose "Remember Me" when logging in, they can undo that (handy if you realise you accidentally left yourself signed in on a public computer).
    If they see anything they don't recognise, a page to walk them through the necessary steps to re-secure their account is available.

    Secure Account Information
     
    New Two-Factor Authentication Setting
    "Logging into the front-end" is one of the options of when to prompt for Two Factor Authentication. In 4.2, this has been separated into two distinct settings:
    Logging into the front-end from a new device Logging into the front-end from a known device If you enable the former, but not the latter, and the user has previously logged in devices, the system will automatically show an explanation to users alongside the other available recovery option. This can be useful especially if you do not want to offer other recovery options.
     
    AdminCP Device Management
    In the AdminCP, administrators can see all the device and IPs a member has used. They can also disable automatic login for any device.
     

    Edit member page shows most recently used device and IP address
     
     
    Viewing a device's details
    The system can also detect if another user is using the same device and will show this in the list of devices.
      
    Users sharing the same device
     
  19. Like
    kysil reacted to Charles for a blog entry, New: Embeds and Integrations   
    IPS Community Suite allows for integrations with quite a few third party systems and also can embed content from external sites. We have added a whole new list of embed providers where you can just paste in a link to that site and a nice box will show up. For example, if I paste this link in normally:
    https://twitter.com/invisionps/status/799269691579449344 I get:
    You can do that will many popular sites already and we are adding a lot more:
    codepen.io coub.com deviantart.com docs.com funnyordie.com gettyimages.com iFixit.com kickstarter.com meetup.com mixcloud.com mix.office.com on.aol.com reddit.com reverbnation.com screencast.com screenr.com slideshare.net smugmug.com ustream.tv Google Maps Once you enable Google Maps under Community Enhancements by entering your Google API key you can them just paste in a link to a Google Map location. So when you paste a link to a Google Map in an editor it shows like this:

    Google Maps in Editor
    The maps are also interactive on the screen.
    REST API
    We have also added quite a few more endpoints, particularly in member management, to our REST API. If you are not already familiar with the REST API it is a great way to integrate external systems with IPS Community Suite. You can both fetch and modify data in the Suite via the API. REST API documentation...
    Third Party Diagnostics
    This is a bit more of a technical feature so feel free to skip if it does not interest you. If you use third party plugins or applications from our Marketplace or from other sites you may occasionally encounter issues in the Suite caused by those items but it is often hard to know the root issue. There are now tools in the AdminCP to show all places in the code that third party items are modifying to help with diagnosing issues. The Suite will now also try to detect if an error it encounters is referencing a third party plugin and suggest you disable it to see if the issue is resolved.
    New Support Tool

    Simplified Support Tool
    Though not specifically about embeds or integrations, the new Support Tool does better help diagnose issues so I thought I would give it a nice shout out. It really does help to find server problems, database issues, or outdated files that might interfere with your site. It also makes support so much easier if you submit your ticket to us via the Support Tool as it sends along a temporary login (if you allow it) for us to use. The new design simplifies the tool down to just one step and it gives you a report and suggested actions.
     
    This change will be in version 4.1.17 which is scheduled to be released in early December 2016.
  20. Like
    kysil reacted to Charles for a blog entry, New: Security and Privacy   
    IPS is always auditing our software to improve security at the code-level but these improvements are not really visible to you even though they protect your site all the time. We are implementing some new features that you can use to enhance the security and privacy of your site. Many of these features depend on your personal preferences, local laws, or the policies of your own organization. Here is a list of what's new:
    Birthday Control

    You may wish to make birthday viewing only show to admins or you can completely disable prompting for a birthday if you consider that information sensitive.
    Member Delete Name Retention
    When deleting a member in the AdminCP, if you choose to keep their posts the system currently names the posts with a display name of "Guest user" where user is the previous display name of the member you deleted. You can how choose to retain their name in posts or not so you can either have it as it is now or simple "Guest" on member delete.
    Password Strength

    Password Strength
    You now have two new options for password: show a strength meter and require strong passwords. You can choose to either just show the meter as a suggestion or you can also choose to enforce a password strength. You can choose between three levels of password enforcement parameters depending on how strict you choose to be.
    Guest Terms Banner

    Guest Terms Banner
    There is a new option to show a guest terms of service banner when a new visitor first visits your site. You can set the text shown in the display and you can also put in two special tags to automatically link to your Terms of Service or Privacy Policy page.
    Age Restrictions

    Age Prompt
    We have always had COPPA support in the Suite but we have extended this to be a more generic age restriction feature. You can now set your site to reject registrations from anyone under a certain age you specify. For privacy, the birthday entered on registration is only used to calculate permission and is never stored.
     
    This change will be in version 4.1.17 which is scheduled to be released in early December 2016.
  21. Like
    kysil reacted to Charles for a blog entry, New: Moderation Improvements   
    We have added a selection of improvements to moderator workflow and some new features to generally make moderation easier.
    We have already talked about a few new moderation improvements:
    Default Warning Notes Tag Quick Edit Word and Link Improvements Now let's go over a few more new features that are designed to help moderation.
    Multi Page Actions
    When you split a topic or delete replies to some content that has multiple pages you would always be redirected back to the first page and first post. This could get a bit annoying if you were previously very deep into a conversation. We now try to remember where you were and keep your place after those items are removed.
    Hide Unapproved Content
    Previously you had only two options when viewing content that was pending moderator approval: delete and approve. You can now choose to hide an item rather than approving it so you can remove it from the approval queue without deleting.
    Moderator Actions on Reports

    Report Status
    When a moderator changes a report status it now logs that action so other moderators can view when and who changed a status.
    Display Name History

    Display Name History
    You can now see a display name history on the front end for a user. This can also be enabled for the public to see per-group if you want everyone to see the display name changes of a member.
    Animated Profile Photos
    You can now disable animated profile photos so your users cannot apply them to their profile. This will not go back and remove existing photos but will stop new additions.
    IP Tools

    IP Use Overview
    The IP tools have had an update to make finding IPs with their related members and posts easier. This works with both IPv4 and IPv6.

    IP Search
    You can also search for all uses of an IP by member or wildcard search an IP to find all uses of an IP range.
     
    These changes to moderator tools will help you better moderate your community and allow you to focus on member interaction rather than member management. In addition to the items linked at the top of this entry we have already talked about, these small changes come together to make moderation even easier in IPS Community Suite.
     
    This change will be in version 4.1.17 which is scheduled to be released in early December 2016.
  22. Like
    kysil reacted to Charles for a blog entry, New: Leaderboard   
    We are excited to announce the Leaderboard as the latest all new feature of IPS Community Suite. The new Leaderboard is designed to better highlight your most active members and content based on reputation and other metrics. The Leaderboard will greatly enhance both member and content discovery on your community.

    Leaderboard Home
    First you will notice the new feature of member leaders based on a specific time frame. In the example above it is set to All Time showing those members with the most reputation overall on your community. It also shows the content with the most reputation for the same timeframe so you get a snapshot of both popular members and popular content in one view.

    Past Leaders
    The Past Leaders tab shows the "winners" of each day in a history. The system counts all reputation made each day and logs the members who had the top reputation counts that day. Using reputation rather than post count encourages your members to post quality of quantity which is really important to any site.

    Winner Profile Badge
    Those who win the day also get a badge on their profile page to highlight that they were the member with the most reputation for a particular day.

    Top Members
    Top Members shows you a list of all members sorted by various metrics. By default you will see members sorted by reputation but you can also easily sort by total post content Suite-wide or per-app. All of these views can be linked directly to so if you wanted a menu item to show members who post the most files in Downloads you can just directly link to that sort view.

    Leaderboard Settings
    There are various settings to control the default behavior of the Leaderboard. You can define the default view and how many members to show which is helpful to tailor it to your needs.
    We hope you enjoy this initial launch of the new Leaderboard feature. We are excited about the new content and member discovery abilities this offers and look forward to adding new options to the Leaderboard as we continue to develop!
     
    This change will be in version 4.1.17 which is scheduled to be released in early December 2016.
×
×
  • Create New...