Cowboy Denny

You would need to contact account services. If you click on contact us at the bottom of the page and select accounts, we can go through this process with you

Steps to reproduce:
Create a new blog. When on the blog page click to open the menu Manage Blog. Now open the first link Edit Blog, but do it in a new browser tab/window. You'll get this error: Error code: 2S119/1 ==================== The CSRF protection key did not match. This may indicate a plugin or theme is out of date. Please contact technical support for more information.  
 

It would probably be worth contacting your host and getting the IPs in question blocked

Logs at level code 1 are worth ignoring, our default for logging these errors is level 3. I would recommend you set it back to that to avoid getting a lot of typically useless logs.

Having spoken with Mark privately as we run similar forums (both Football, not Soccer, Football!), he is speaking about guests viewing the forum not members.
On his setup, only guests are shown ads, his concern is that if guests are not shown up to date posts say during the game they will choose to follow the game elsewhere, say X for example.
This would obviously have a negative impact on his ad revenue which pays the bills.
I do share his concern somewhat and would be nice to reduce the time, I personally ran with 5 minutes when using Cloudflare on a Self Host setup prior to moving to IPS Cloud.
For me this was a nice balance between not annoying guests too much whilst encouraging them to also signup and login.
I guess the feedback here would be, it would be nice to control the cache time per site if possible rather than a blanket uncontrollable 15 minutes which maybe fine for say a gaming forum, just not for one that has live events.

Wrong, you don't need an own shop (not even own forum for support). You can use a third party service, FetchApp or DPD for example.
You post your application in the new Marketplace just like now, but instead uploading a file you post a link to the file you have uploaded there. They handle all the rest, payments etc. and for support you use the forums of the new MP.
One of the biggest XF developers is using it for years.

As a hobbyist of the product, I really held off on doing anything major with this product (beyond just renewing my self-hosted license to tinker). The reason? A lot of what my community requires truly requires plugins and convincing my demographic to visit a website over Discord is truly a challenge. Incentivizing things like that will always be a challenge unless web apps, as you guys showcased, become a norm. However, telling a younger demographic about web applications and how to get one on your phone so its like an app is unlikely to yield the results. 
It seems more and more other companies are leveraging forums (Discord being one) and finding ways to enhance their product while keeping it true. While your bulk customers have probably not leveraged the marketplace, it seems your vocal minority has. I do get a bit lost in what exactly losses you were experiencing beyond chargebacks. 
 
Thank you as always for your insight. 

One additional question and/or feature request:
It would be awesome if there was conditional logic for the tags to only show if they have been filled out.
So if a user answered question X with 123 but left question Y blank the topic post template could be setup to show both if both were fully filled out?

Cloudflare has a CAPTCHA called Turnstile. The captcha is free. It can be implemented as additional protection.
More: https://www.cloudflare.com/products/turnstile/
Previews:

There's already a suggestion for this 🙂

Thought it was pretty obvious myself, seeing as it is the reason the topic was created. Anyway...

The information is incorrect and guides to a location which doesn't exist anymore.
it should be AdminCP -> System -> API -> OAuth Clients

Quite right you are, Nathan. Have created a bug report for that

I'm trying to connect my Invision sub sites with the main Invision site for auth (which I use to be able to do) and is still advertised as a possibility.  Yes I clicked on the link "Connect Two Invision Communities" and it says the same thing.

I'm running 4.7.10 but I don't see AdminCP -> System -> REST & OATH option anymore (which I use to)

Can someone clue me in to how we do this now?
 

Click on API.

It seems some action by you has restored it to work. Now on test everything looks good.

Glad to hear you were able to resolve your issue.

2.4 spotlight

Classifieds home before

 
Classifieds home after
 
Advert view before

 
Advert view after

I have set it up to run every minute. Depending on your community and server load you can adapt the time interval.

Every minute as per the instructions above.

This sounds like your host is not recognizing index.php as a default file.  
This is typically set through the DirectoryIndex directive in httpd.conf
DirectoryIndex index.html index.php
By the way...  
https://hosangit.net/index.php
If you specifically add the index.php, it works.  So yes...  this is a config issue within your server. Either you've got an existing index.htm(l) file that is being called first, or you don't have index.php as a default file.  🙂

Cowboy Denny, glad you got it squared away!  🙂 
I meant to share a screenshot of SMTP settings for SES since I use it also, but got distracted by something else...  for anyone that finds this later that is looking for it:

Exiting SES sandbox sucks.  It took several go arounds with them to get it lifted, but it finally happened.  

I'll give you a quick highlevel of my sites (I have multiple hosted on the same AWS server)
I'm not AWS genius and wanted to dip my toes in the water with hosting my websites in AWS.
Previous hosting was LiquidWeb VPS (so I had WHM/cPanel).  LiquidWeb was fantastic and the advantage of LiquidWeb over AWS is they supply instant support (via ticket or calling 24x7) so if you aren't so savy on maintaining a server, they are fantastic but only if you get the "managed" service which obviously cost more.
Now knowing all that..  I cheated a bit...  I created my AWS Console account, selected Lightsail and choose the WHM/cPanel version (since its what I'm familar with).  You will need to purchase a cPanel license (if you don't already have one) and register it to the static IP you set on your Lightsail instance.  Its pretty cheap (like $10 or something)...
Once its all booted up I logged into WHM (https://staticIPaddress:2087) and ran the option: Transfer which when you click on transfer you provide the IP address of your old WHM server, root and password.  After that.. it transfers everything and updates everything from old IP to new IP.  it was so darn easy.  It transferred all the emails, settings..   I mean, it couldn't of been easier.
Then I transferred my domains from Google Registrar to Route53 (Amazon DNS) not that you have to but since my crap is business I just one one bill that I can charge my customers.
Only hiccup I had was email.  I added the ports to my Lightsail Firewall but still issues sending emails from by IPS board...  so I leveraged sendgrid API which works great but is limited to 100 emails for the free account which I don't think will be an issue.
Hope that helps..  again, its high level but I was very impressed.  Previously I did the EC2 instance because I wanted to load all my own software and have my control but honestly it was a headache for me personally.  Using lightsail was WAY easier...  if you already have a WHM/cPanel you want to transfer everything from.
NOTE: if you do the transfer of WHM/cPanel note that it will disable your account on the old box.  There may be a setting to not do this but it was fine for me since the websites never even went down.

JetBackup addon for cPanel only being $6/mo isn't bad at all for what it can do.  When you pair it with AWS S3 bucket its not bad since you don't get charged for what you put in the S3 bucket, just when you pull stuff out and I typically (knock on wood) don't have to restore often.

Something with the user registration broke on our website after we upgraded from IPS 4.7.5 to 4.7.6.
I'm proud to say that our host hostingsupremo.com just performed a successful JetBackup restore for us!