Fernando Mercês

I understand. Thanks for your quick answer. I am sorry my post might have contributed to this feeling of yours. It was not my intent to promote any FUD. This has probably nothing to do with Invision Community software as the vulnerability is in PHP itself. I posted it here because they handle the cloud instances, so they are the ones in control of what PHP version runs there. :) The folks running self-hosted instances, on the other hand, probably want to upgrade their PHP software asap (patched versions are already available), but again, this has nothing to do with Invision team. 🙏

Hi all, You may have heard of the recent announcements of CVE-2026-109618 and CVE-2026-109619. Some say it's been exploited in the wild and that the mitigations are ineffective. Patches are schedules to be released later today. I suppose Invision team is handling that for cloud customers. Can we have an update once the patch is applied? Also, are you aware of exploitation attempts on Invision? Would it be affected (I know this is a hard question when no one seem to have details though)? Thanks! References https://www.php.net/archive/2026.php#2026-10-20-1 https://cert.europa.eu/publications/security-advisories/2026-018/ https://en.wikipedia.org/wiki/PHP2Shell

Hey @Gary, thanks for your answer. 🙂 The issue with Commerce app for me is the lack of support to the popular local payment services. I know there's also a "Manual" payment method, but then the users have to make two purchases: one in Invision and another one in the payment service website. Often they get confused this way. So, I basically can't use Commerce. Using the button image linked to the payment page of the service should be enough in Pages though. Thanks for this idea. 🙂 Best, Fernando

Great stuff, thanks for sharing. I mainly use source mode to add payment buttons (think of PayPal "Donate now" buttons, for example, but I use other, local services). They're basically iframes I think, but they have some code that's required to hold user IDs, button IDs, etc. Will I be able to keep using them? Thanks, Fernando

Hi! I was wondering why Courses app is not shown in the main Invision website. It is not listed under Features either. No mention on Invision 5 recent blogposts... Maybe I'm just being crazy, but is there any plans to kill it? I'm using it a lot, so I'm scared, sorry. 🫠

Great news! Here's what I suggest: It'd be nice to have tests. We should be able to create questions using a WYSIWYG editor and set the correct answer(s) in advance. Students could retake the tests up to X times if they fail (score < Y). +1 for certificates. Ability to limit how long the student has access to the course (6 months, 1 year, lifetime, etc). Bulk mail to all course participants. Set one or more users as instructors. Set one or more users as teaching assistants / moderators (like in Clubs). Students should be able to "follow" the course to receive notifications when things get updated (content, new classes, etc). Sysadmins should be able to convert a database entry to a Course (to keep pageviews, ranking, comments, etc). Thank you!