Luuuk

2 minutes ago, PPlanet said:

But I don’t think it’s a case of spammers creating accounts at different years and leaving them dormant until now. They are gaining access to someone else’s accounts.

Yes, we already know that the old previously legit accounts suddenly are "re-used" in the attack. As some of us confirmed many of those accounts are listed as compromised in the Have I Been Pwned database. So it looks that the spammers have in hands some data breach and run massively bots to match results. Personally I suspect that this attack could have something to do with the recent LastPass leak.

@PPlanet

Actually one the spammers IP is classified as doing "brute force" attacks (scroll to the log sample) on many available forum platforms so it not only related to Invision.

Hi,

The issue is discussed here:

4 minutes ago, greek_parea said:

ok but why happened this?

Already said that it looks that bots are scanning if compromised logins exist and use those found:

On 1/15/2023 at 3:48 PM, opentype said:

They probably use hacked databases from social media sites and login with accounts that use the same data everywhere.

13 hours ago, Malwarebytes Forums said:

3/4 were shown compromised on https://haveibeenpwned.com/

We had about 5 that showed no breach found in their database, but assume as others that some other database or underground site has them listed and were used on a fishing expedition.

3 hours ago, DawPi said:

The same. I have latest IPS4, active antispam and by board is under attack by the last few days.

Also Polish board here under the same type of attack. Since last days hundreds / thousands foreigner bots are "scanning" my forum. After blocking IPs "new set" is in the play. Today first old legit account has been shown as "hijacked" and posted an obvious spam.

But I still am on older 4.6.12.1 so I don't think it has anything to do with the IPS version.

16 minutes ago, drawncodes said:

I've noticed this a long time ago with "Recent Profile Visitors", it's not a bug, but. If you go on someone's profile and you just keep spaming F5 or you abuse the refresh button the Profile Visitators will encrease.

It is not only with Visitors. The same applies to the topic listing (clicking on a topic title many times but faster than a page can "reload").

@Jim M That's fine.

But I won't swap to the database writing (for one specific widget only) to be a "guinea pig" without a support (I am on Windows Server so of course you won't investigate, while the error was reported by "LAMP" customers as well but you "could not reproduce").

So you need other "LAMP" customer for further investigations.

2 hours ago, Emediate said:

Why would the above apply to just one file of many in the datastore, and not affect any others?

That is exactly my question too. And the error was reported more than once but the only "solution" given each time is to swap to the database:

It is a recurring request:

4 minutes ago, OptimusBain said:

I don't think that's wise! Because now I deleted a lot of attachments. If used to help someone else, that attachment is gone forever 😞

Well, that is the IPS configuration here allowing to mass delete. But the software itself has an option to prevent deleting files from "My Attachment" page:

ACP > Members > Groups > Edit selected group > Content tab > Can delete attachments?

"Attachments are automatically deleted if the content they are attached to is deleted or the attachment is removed from them.
When this option is enabled, users in this group will be able to delete attachments from the My Attachments page. When they do so, anywhere the attachment was used will then contain a broken image or link."

12 minutes ago, OptimusBain said:

• Shouldn't the error explain that I've reached the maximum in attachment upload and ALSO show the link to attachment lists so that I can start deleting stuff from there?
• I understand that I cannot use the PM to send more attachments. But this maximum also prevents me from uploading screenshots asking for help. I believe these two instances could be differentiated

I think you could make some suggestions in the existing topic (other user was confused too):

13 minutes ago, OptimusBain said:

Are the attachments deleted from everywhere on the website? Imagine I asked for help, or uploaded some screenshots to help someone else? Will they be deleted as well? 

If you delete an attachment from a selected topic but the file is used in more than one topic the attachment is only removed from the specific topic display (while the file is still there to be displayed in the remaining topics).

But if you delete files directly from your "My Attachments" manager they will be removed from everywhere.

Just now, OptimusBain said:

I mean, how can I know I need to check that URL?

I gave you the direct link but the option itself leading to the link is well accessible:

Expand your profile menu at the top > My Attachments

3 hours ago, OptimusBain said:

Not only that, now anywhere on your site, the maximum capacity is 8.85 kb 😞 It's everywhere.

Have you checked how much space you used in total?

https://invisioncommunity.com/attachments/

@opentype

I have no idea how could I miss that! Thanks a lot!

1 hour ago, opentype said:

No, buttons don’t require the HTML option. That’s the point.

Well, but according to my experience "Can Post HTML" has to be enabled for the buttons using custom HTML... I have buttons loading simple "div backgrounds" in various colors. For chosen users I created a secondary group allowed to see the extra buttons. And while the buttons were visible and "working" during post saving the whole HTML was stripped. Then I had to enable "Can Post HTML" for the secondary group...

5 hours ago, Randy Calvert said:

4.6 does not support PHP8.

Not true. From changelog for 4.6.2:

Added support for PHP 8.

13 minutes ago, SeNioR- said:

Everything looks fine for me even after refreshing.

Try more than once (not always the effect is after first refresh). Also, do not be mislead by the field background "rendering" the field. Note that no border is rendered on the current (Nexxe) theme when you highlight or click a specific field. On Default and Ehren's theme the effect is more visible because fields do not use backgrounds.

The topic is also discussed on Ehren's forum. First I suggested to disable Cloudflare Rocket Loader, then the whole Cloudflare. System cache cleared. The issue with no input border is on 3 different themes including Default.

Hi,

IIS manager > select your site > PHP Manager > Change PHP version:

Environment variables:

OPENSSL_CONF is required for Push notifications.

Hi,

I found this widget but it is for the topic view:

And for Gallery images also this:

46 minutes ago, Christian Meixner said:

Is there an option in Invision, that I just can't find, to enable this or is this a custom extension?

See this topic:

17 hours ago, TacticalGaming said:

Nice, but how do I remove this guy?

Great! How could I miss the plugin?! Till now I was truncating the core_log table.

The error indicates that there is a database corruption (missing core_follow_count_cache table).

To fix that you need to restore the table from a backup. Do you have a backup done before upgrading?

45 minutes ago, Luuuk said:

you can't select more than 7 lines being hardcoded

Can't edit my post above but there is an update pending:

15 minutes ago, Nathan Explosion said:

v2.2.1 is currently pending approval, and the only change is to remove the 'Max' on the "Number of lines to show in truncated quotes" setting, as it no longer appears to be an requirement to have it there...a bigger number can now be used.

So the plugin does all you want including the user settings (I missed to quote that part).