SeNioR-

Please install the latest beta, rather than beta 1. We are a few versions in

There is some unused code in the Authy handler file /system/MFA/Authy/Handler.php in the verifyApiKey() function at the end of the file:
public static function verifyApiKey( $val ) { try { return \IPS\Http\Url::external("https://api.authy.com/protected/json/app/details")->setQueryString( 'api_key', $val )->request()->get()->decodeJson(); } catch ( \IPS\Http\Request\Exception $e ) { throw new \DomainException( $e->getMessage() ); } if ( !$response['success'] ) { throw new \DomainException( $response['message'] ); } }  
The IF after the TRY/CATCH is never executed, it either returns inside the TRY or throws an exception in the CATCH:
if ( !$response['success'] ) { throw new \DomainException( $response['message'] ); } It can be removed.

Kind of.

@Matt Finger is working hard on it as we speak. I don't want to say too much but we did a lot of research and picked the best solution in terms of development, stability and future functionality. More news soon. It's probably one most have never heard of but it is used widely. If anyone is worried about us using Froalo or TinyMCE, don't be. 😅

My oh my, how exciting

We looked at Quill, but no.

🤔-Thinking about the bug
👀-Looking for the solution to the bug
📰-Writing the fix for the bug
➡️-Exiting when he realised the bug fix didnt work
👤-Hiding in the shadow to see if anyone notices
 

I want to thank @teraßyte for outstanding guidance.
We were able to complete the upgrade from an outdated community forum from 4.2 to 4.7+ with his support.
His service is top notch and I highly recommend reaching out to him for help.
Respectfully,
Shyrax

I can’t wait for the new bumpin’ music track!

Quick, let's try to find clues in Matt's emojis 👀

New feature blog early next week. 🤔👀📰➡️👤

@Marc Stridgen the devil tempted me to try to do it manually 😈
UPDATE core_members SET signature=REPLACE(signature, '/uploads/monthly_','/monthly_'); UPDATE core_message_posts SET msg_post=REPLACE(msg_post, '/uploads/monthly_','/monthly_'); UPDATE forums_archive_posts SET archive_content=REPLACE(archive_content, '/uploads/monthly_','/monthly_'); UPDATE forums_posts SET post=REPLACE(post, '/uploads/monthly_','/monthly_'); UPDATE core_member_status_replies SET reply_content=REPLACE(reply_content, '/uploads/monthly_','/monthly_'); It came out fine. I marked for myself about 100 places where there was this problem, and everywhere is in good
 
Thanks to everyone for your help. The topic can be closed

Is there any approximate release date for version v5 yet?

Yeah, IPB5 will be pretty sweet, from what I can tell.  Looking forward to seeing more from the team.  I find it extremely satisfying to see how active the developers are making a difference in our communities.  Also heavy involvement with us is key and you are hitting that nail on the head too.  Much appreciate everything you guys are doing!!

Eagerly awaiting the annoucements @Matt !

4.7.16 is currently in beta.  Once it is released, the issue should be fixed.  🙂

Same thing happens for me in ACP when editing templates etc.
The codemirror.js is missing semicolons in few places, had to patch it up to edit my theme.

Trying to use the Code button in the editor on this site throws a JS error in the browser's console:

To clarify: The possibility to install 3rd party apps wasn't removed in v5!
Plugins were deprecated, but applications can still be created, exported, imported, etc.. Hooks were replaced with Code Listeners and several new Extensions But all in all, 3rd parties will still be able to create new apps like Member Garage, Member Maps, Classified Ads, Member Info blocks etc..
More information about the upcoming changes can be found in our Dev Blog: https://invisioncommunity.com/developers/devblog/blog/

As a community owner for over two decades, I wanted to give some personal feedback as to what I find very useful (and need) to keep my community alive. 
Big Tech Competition:  The biggest challenge has been competing with other online services like FB, Reddit, Twitter, etc, etc.  You guys have hit the sweet spot in generating useful integrations to these services.  I would also like one for Linkedin but I'm sure that's on the radar.  With any competition like big tech, we can provide a more specialized touch to any community.  I hope we can still maintain this presence and I have a feeling IBP5 will give us even more ways to create active sites that give the big boys a run for their money.
Monetization:  I have a specialized car club and, with Invision, I've been able to monetize our existence and pay our bills.  We are hosted on a dedicated server environment so we have our fair-share of bills.  I've looked into using a cloud-host but the costs don't justify simply putting a machine into a colo site.  We also have other bills like licensing, email services, and annual domain costs.  With the integrations to Google Adsense, Infolinks, and the paid subscription model (built into IPB), this has enabled us to pay these bills and continue well into the future.  The addition of Subscriptions has also helped us a LOT!!!!

3rd Pary Marketplace:  I have appreciated the Invision Community capabilities with 3rd party apps (Marketplace).  However, I see these have been depreciated for the upcoming release.  Some of these modules really gave us an edge and we were able to stand out.  I fear that removing this integration may put us into a general category just like everyone else.  So, I hope the team considers opening this up again or at least making it easier for us to customize our sites to provide unique services.  Some of the more important apps for us are Member Garage, Member Maps, Classified Ads (big one), Tapatalk, and Member Info blocks (we use member numbers for members to use as discount codes to our partners).
Advertising Banners:  We have used, and will continue to use banner sponsor placements on our site.  The one place we are missing is at the top of the screen.  Of course we can always do a pop-up or slide-down style ad.  But people tend to hate these and disable them.  So, if we can add more customizable locations for these banners, it would be a big hit for our business.  
Google & SEO:  This service is so strange and it seems to change every other quarter.  New rules all the time, and I've gone from ~$700/mo in banner income to ~$125/mo.  I have no idea why this is, but I did notice that Google doesn't do very well with active community sites (they prefer static pages I guess).  So, if you are building something new with the release of IPB5, I would be very interested to see how we can improve our SEO or even Google results.
Forum Layout:  I *REALLY* like the new look of your forum design in IPB5.  I cannot wait to use it.  The one thing our members really appreciate are the active notifications and easy way to see how things changed over the last 24/48 hours.  The new features coming seem to compliment this very well.  Not to mention a lot of people have been asking for the light/dark mode and it will be nice to see this capability built-in rather than having to design our own.
Community Experts:  I did see something about the addition of community experts.  VERY GOOD addition!!  In an automotive community like ours, there are always guys hanging around that are considered RL experts as well.  I'd love to give them the recognition they deserve and let people know they actually *DO* know what they are talking about.  I hope this is an 'approved only' capability as I am sure some people may request this status and don't really deserve it.  😉
Downloads, Knowledgebase, Gallery:  These existing capabilities are huge wins for us.  Although I would like to see an update to Gallery, the majority of the existing features work very well.  I hope these stay and continue to see improvements as the product goes into the next stage.
Blogs:  For us, the blog module has been a strange experience.  Some guys know how to use it, while other people tend to post questions and use it like a forum.  If we were to continue using blogs, it might be a great idea to make sure end-users know they are in a "blog module" rather than part of the forums.  It's hard to explain on text but honestly I think people get confused as to what a blog is versus a forum.
All in all, I am so happy to see that I've invested with a company that is taking this product to the next level.  Your team is amazing and it's reassuring to see that private communities are still a necessary part of the Internet.  As we continue forward, please understand that I'll stick around as a long term customer.  Just don't jack up the rates too high on us.   😉
Mike

It’s been that way as long as I can remember!

It works on a different principle. IP blocking only works with the registration form. The user can still browse the forum, e.g. by logging out of the account or opening it in incognito mode, but he will not be able to create a new account from this IP.
The IP block is useless, if someone has a changing IP, all you need to do is reset the router or the Internet connection itself and you can create an account again.

Ban by IP prevents any username from signing in.  To be honest, blocking by IP nowadays is almost useless. I can switch IP addresses with my ISP with the click of a button, or use a VPN, or switch to a mobile device and wander around, etc. 
The behavior of blocking only logged in accounts has been like this as long as I can remember. To be honest, if you want to block the entire IP… don’t try to use software. Either use the server (like htaccess or a server firewall like csf) or with a WAF (like cloudflare).

The \IPS\Helpers\Form\Date class does not account properly for a member's timezone when the min and/or max options are set.
 
This is the file's code on lines 303-314 in the validate() function:
if ( $this->value and $this->options['min'] !== NULL and $this->options['min'] > $this->value ) { $string = $this->options['min']->setTimeZone( $timezone )->localeDate( \IPS\Member::loggedIn() ); if( $this->options['time'] ) { $string .=' ' . $this->options['min']->setTimeZone( $timezone )->localeTime( \IPS\Member::loggedIn() ); } throw new \LengthException( \IPS\Member::loggedIn()->language()->addToStack('form_date_min', FALSE, array( 'sprintf' => array( $string ) ) ) ); } /* Check maximum */ if ( $this->value and $this->options['max'] !== NULL and $this->options['max'] < $this->value ) { $string = $this->options['max']->setTimeZone( $timezone )->localeDate( \IPS\Member::loggedIn() ); if( $this->options['time'] ) { $string .=' ' . $this->options['max']->setTimeZone( $timezone )->localeTime( \IPS\Member::loggedIn() ); } throw new \LengthException( \IPS\Member::loggedIn()->language()->addToStack('form_date_max', FALSE, array( 'sprintf' => array( $string ) ) ) ); }  
The code doesn't account at all for the timezone when checking the min/max values against the entered value:
$this->options['min'] > $this->value $this->options['max'] < $this->value The timezone is added only inside the IF check to display the error, but not before it for the check:
$string = $this->options['min']->setTimeZone( $timezone )->localeDate( \IPS\Member::loggedIn() ); $string = $this->options['max']->setTimeZone( $timezone )->localeDate( \IPS\Member::loggedIn() );  
This causes the check to fail for a user close to the UTC timezone, while it passes for a user with a more distant timezone.
 
Here is an example with 2 different timezones (Rome & New York):
DEBUG CODE: ================================================== print_r( $this->value ); print_r( $this->options['min'] ); print_r( $this->options['min']->setTimeZone( $timezone ) ); var_dump( $this->options['min'] > $this->value ); exit; ================================================== OUTPUT FOR ROME TIMEZONE: ================================================== IPS\DateTime Object ( [date] => 2024-03-02 00:01:00.000000 [timezone_type] => 3 [timezone] => Europe/Rome ) IPS\DateTime Object ( [date] => 2024-03-02 00:58:41.440303 [timezone_type] => 3 [timezone] => UTC ) IPS\DateTime Object ( [date] => 2024-03-02 01:58:41.440303 [timezone_type] => 3 [timezone] => Europe/Rome ) bool(true) ================================================== OUTPUT FOR NEW YORK TIMEZONE: ================================================== IPS\DateTime Object ( [date] => 2024-03-02 02:41:00.000000 [timezone_type] => 3 [timezone] => America/New_York ) IPS\DateTime Object ( [date] => 2024-03-02 00:52:00.648474 [timezone_type] => 3 [timezone] => UTC ) IPS\DateTime Object ( [date] => 2024-03-01 19:52:00.648474 [timezone_type] => 3 [timezone] => America/New_York ) bool(false)  
As you can see from the debug output above, the member with a Rome timezone fails to pass the check (TRUE triggers the error), while the New York timezone passes the check (FALSE doesn't trigger the error).
 
The timezone must be added to the min/max checks before the check is done, and not after to display only the error.

Unfortunately, I am not seeing anything particular with this account which would allow them to login anonymously. Creating an account myself, I am also unable to hide my online status. The administrator group is able to do so but that is because you allow it. Please let us know if you see this again. I am wondering if the account was only partially created at the time you viewed this, so we logged it as anonymous. 

We have a few more things to announce, but we're just finalising our internal reviews. I want to do a status update on v5 early next week and outline the next steps.