Ocean West

I'd be more concerned about sending webhooks to a US-based company there is a lot of PII in there including all profile info if they provided such as email, gender, birthday, full name, and all profile fields even if we disallow showing them publicly their profile.

 

I'd be more concerned about sending webhooks to a US-based company there is a lot of PII in there including all profile info if they provided such as email, gender, birthday, full name, and all profile fields even if we disallow showing them publicly their profile.

 

That would be true if IPS was using a physical drives and servers, etc.  IPS uses clustered services and does not rely on a single database, etc.  There are multiple read/write clusters that exist.  Also in the event of a disaster, there are multiple types of backups of the data (ones designed to be retrieved quickly, and others that are designed for "OMG THE WORLD IS ENDING" scenarios).
There's not much of a chance of needing to resort to a data recovery service.  🙂 

I can assure you that we do not have physical drives or servers.

That would probably slow things down as you need to keep multiple DB connections open and less chance of using joins, etc.

I don't know the performance barriers to SQL databases but my thought was more a separation of concerns. Would it be better to have separate DB file for say all marketplace apps? vs modifying core files? I am sure I have database detritus of columns from old stuff that just keeps hanging around. 

I am finding I have a lot of "custom" Friendly URLs that have the "revert" option - I've screen shot a few and reverted them and they look identical not sure if this was just legacy stuff that never got a second look.

There should be ACP log for when things are enabled or disabled - especially as part of a bulk operation. Using the ACP support feature to disable or by SOP by IPS when reviewing tickets use of this will disable apps / plugins and advertisements. Having a timestamped log of when and what items was disabled it may make it easier to enable things so you can be back to business without extra struggle. 
Namely advertisements which may have expired or ads that may be turned off for other reasons you have know way of knowing which ads were disabled during this bulk operation. 
 
 

Happy Hump Day! Sort of… 
I have a bit of news to share with you: this will be my last Hump Day as I am stepping down from Invision Community. 😢 
I am transitioning to a new role at Amazon. I’ll be creating content and engagement solutions for AWS. 
I’d like to take a moment to thank this community for welcoming me with open arms. When I first started my journey as an Invision Community team member, I focused on community advocacy and connecting clients with the team. We quickly realized my, um... exuberance was better suited in marketing and sales. 
Creating content around Invision Community opened my eyes even further to how brilliantly crafted this platform is and the team behind it.
I've also genuinely enjoyed communicating with industry professionals every day who showed interest in adding a community component to their business.
So many incredible Achievements (😏) happened along the way; I’m grateful I was a part of Invision Community’s success as we blazed through the 20-year anniversary. 🎉 
Now, you won’t be rid of me entirely. My own community, BreatheHeavy, will still remain on the Invision Community platform. I look forward to staying connected with all of you here!
Thank you for engaging and interacting with me these last few years. 
Please feel free to PM me here if you have any feedback, questions or well wishes. 😃 
I want to give a special thanks to @Charles for being my mentor and seeing potential in me (even when I didn't). 
And before I go, here’s a list of updates and changes made to the platform in the last seven days:
 

Thank you, 🙏 
-Jordan
 

Hey it would be kind of cool to customize the gift cards with photos from Pixelbay

Never seen update take this long I am stuck at step 4 extracting, been like that for several minutes. Should I refresh the page?
resolved - refresh worked. 

I am on Safari (M1 Monterey) and (Intel, Ventura)
I have disabled all safari's extensions. (1Password ) I have disabled any auto fill's. I am not using MacOS / iCloud Passwords  I can click SIGN OUT all day long it shows me as logged out. however I click "Log in > Sign in With Email" and NEVER prompted for credentials.  I have cleared browser cache several times. I have restarted browser several times.  when ever this came in to play I haven't seen a Email / Password field.

Two weeks ago I was out of state and remote back to my office to work on things and seen the same behavior 2000 miles away. Between my iMac at Home and my Laptop in the hotel. 
 

I don’t know. What would it solve exactly? Every password manager is already easy to use and it works on every website. Adding dedicated implementations for specific password managers only sounds beneficial to the provider of that one password manager. 
The concept of password-less logins is around the corner and I think that is more promising. 
https://www.apple.com/newsroom/2022/05/apple-google-and-microsoft-commit-to-expanded-support-for-fido-standard/
 

The only thing exposed with that is IPS version 4.  That is more than 7 years of releases.  In fact well more than 100 releases during that time frame.  There is not a lot of information exposed even if there was someone motivated enough to look. 

A real attacker would be able to tell a site is using IPB simply by viewing the source and looking at the structure of the code to figure out a site is using IPB. The purpose of removing a SPECIFIC version number such as 4.6.1 is to prevent exploit of something that might uniquely exist in that version. This does not expose that. 

Round of applause for adding this to the web hooks. 👏
But let's now talk about a way to configure what is in the payload.
It seems that the new DataLayer feature can toggle elements off we need this sort of thing in the web-hooks so as not not to send PII data to a third party. 

A colleague of mine says he has the same behavior as you report, that once inactive they are removed the next day, so this does appear to be working as intended. (It's likely my site needs until tomorrow some time to run the task which removes the one I previously showed in my screenshots.)
I've retitled the topic and left it as a suggestion for a future version; that either they do not automatically get removed, or it be a choice for the site admin.

Nope.  It's still known who sent it even if it's anonymous.  You may be anonymous to the public, but the software knows...  the software always knows!  🙂 

We’ve listed to the feedback:)
In an upcoming release( not 4.7.0) the content type header will be configurable. 

In addition I get copies of invoice / renewal emails,
The presentation is terrible for site owner because you are receiving email addressed TO someone else.
I would prefer to get a notification that X party was sent their invoice/renewal email click here if you want to see what it looks like I shouldn't ever have email in my INBOX sent TO someone else. 

For a novel of text posted in a forum I would rather opt for something like this, where reader could click and choose to speed read the text. 
https://spritz.com or https://swiftread.com
Alternatively would be cool if you could invoke quickly based on OS the text to speech for it to just read you the post.
Most of these options obviously are not ideal for every post especially with code snippets. 

For a novel of text posted in a forum I would rather opt for something like this, where reader could click and choose to speed read the text. 
https://spritz.com or https://swiftread.com
Alternatively would be cool if you could invoke quickly based on OS the text to speech for it to just read you the post.
Most of these options obviously are not ideal for every post especially with code snippets. 

Typographer’s nightmare. 

IPS when designing and planning out new feature please consider making such new features more complete by allowing bulk changes in the ACP that users may wish to change to one or more areas.
All too often new features are stored in a bitwise and there is no interface to effectuate a change en mass.
At least for areas like Forums a new feature should include automatic inherence of a setting to all children making the change to a category that will set/reset to all sub forums is by far more ideal making a change to half dozen categories then making one one at a time in over a hundred forums.
Or even if I am deep in to the settings of a forum a set of buttons  > save and go to next forum where it will save the setting and keep me on the same setting page but for the next forum in sequence.
Id also hope for some kind of discovery tool to see at a glance how a setting is set across the site. 
 

IPS when designing and planning out new feature please consider making such new features more complete by allowing bulk changes in the ACP that users may wish to change to one or more areas.
All too often new features are stored in a bitwise and there is no interface to effectuate a change en mass.
At least for areas like Forums a new feature should include automatic inherence of a setting to all children making the change to a category that will set/reset to all sub forums is by far more ideal making a change to half dozen categories then making one one at a time in over a hundred forums.
Or even if I am deep in to the settings of a forum a set of buttons  > save and go to next forum where it will save the setting and keep me on the same setting page but for the next forum in sequence.
Id also hope for some kind of discovery tool to see at a glance how a setting is set across the site. 
 

IPS when designing and planning out new feature please consider making such new features more complete by allowing bulk changes in the ACP that users may wish to change to one or more areas.
All too often new features are stored in a bitwise and there is no interface to effectuate a change en mass.
At least for areas like Forums a new feature should include automatic inherence of a setting to all children making the change to a category that will set/reset to all sub forums is by far more ideal making a change to half dozen categories then making one one at a time in over a hundred forums.
Or even if I am deep in to the settings of a forum a set of buttons  > save and go to next forum where it will save the setting and keep me on the same setting page but for the next forum in sequence.
Id also hope for some kind of discovery tool to see at a glance how a setting is set across the site.