Mustafa Online

A short while ago we revealed the new look Admin CP for Invision Community 4.5. The focus was on increasing the workspace, brightening and modernising the look.
However, for some this new look was perhaps a little too bright, especially when setting your OS to use dark mode.
Rather than cause an increase in sales for sunglasses, we went ahead and implemented a dark mode for the Admin CP.
You can set it to work inline with your OS preference, or you can choose to enforce light or dark mode.
I'm sure the next question you're about to ask is "Hey Ehren that looks amazing and now working at 3 am won't wake up the neighbours when I log into the AdminCP but can you do the same for the front-end?"
The short answer to that is "no". The theme system isn't currently designed to support both light and dark colour schemes, however our marketplace has a great selection of dark themes to enhance your community.
I hope that you like this new feature and I just wanted to say thanks for your feedback; we do listen!

Statistics can help you manage and monitor the direction of your community, giving you valuable insight into how your visitors are interacting with your site and what areas of your community deserve the most of your attention. With the popularity of Clubs in Invision Community, we determined that some statistics aimed at helping administrators review how this feature is being received by their end users was warranted.


Club activity statistics overview
When accessing the "Club Activity" statistics page in the AdminCP, you will be able to quickly see at a glance which club types are the most popular, see which clubs are gaining the most traction with new signups, and see trends in club creations over time. With the signups chart, you can further filter by one or more specific clubs, and save these filter preferences as new tabs on the chart.

See activity across all clubs
The "All Club Activity" tab on this page shows you which types of content (topics, images, files, etc.) are most popular across all clubs as an aggregate. If you find that Calendar or Downloads is especially popular throughout clubs then you may wish to promote these features further. Conversely if you find that a certain type of content is not being leveraged, you may wish to promote it, or retire its functionality on your community.

Activity by club shows you which clubs are most active
You can also view activity per-club, allowing you to identify which of your clubs are the most popular and have the most activity. As with the "Club signups" chart, you can use filters to view just the clubs you are interested in comparing, and save these filters for easy review later on.
 
We hope you find value in these new statistics pages, and that they help you manage the Clubs feature on your site more effectively.

Invision Community has come a long way over the past five years.
We've added many new features and invigorated the front-end user experience to keep it current and in-line with modern interfaces.
One area that has remained largely the same is the Admin Control Panel.
When we released Invision Community 4.0 back in 2014, the Admin Control Panel was updated but has stayed relatively dormant since.
But that's all about to change with the upcoming release of Invision Community 4.5!

The Admin Control Panel in 4.5 has received a substantial update, resulting in a modern color scheme and a clean, minimalistic design.
We felt that a lighter, more open design allowed the content more space and to feel less crowded. 
The dark grays have been replaced with shades of blue and aqua which closely reflects Invision Community's new branding, while other colors have been lightened and saturated.
Along with the new color scheme, the overall layout of the ACP has intentionally been kept similar to the existing version, resulting in a design that feels surprisingly familiar yet refreshingly new at the same time.

We hope you've enjoyed this small sneak peek into Invision Community 4.5 and we look forward to introducing you to some more new features in the upcoming weeks!

Although we continuously review security within Invision Community, a major release such as 4.5 allows us to be especially proactive when it comes to keeping your community safe.
This blog entry outlines several enhancements to improve security in Invision Community 4.5.
Password Handling
Keeping your member's passwords secure is the simplest way to keep accounts safe and out of the wrong hands, so it makes sense to look at ways to ensure this doesn't happen.
Invision Community already uses strong one-way hashing when storing passwords, which means that once the password is stored in the database, there is no way to know the plain text version.
However, when creating a new member account via the AdminCP, a random password was created, and this was sent in the welcome email to the new member's email address.
As of Invision Community 4.5, this no longer happens, and the new member is invited to create a new password when visiting the community for the first time.

Part of your internal security procedures might be to force a reset of all passwords periodically. Invision Community 4.5 allows this on a per-member basis, or via a selection of filters to enforce a reset for many members at once.

This clears out any stored password hashes and emails the affected members to remind them to set up a new password.

AdminCP Security
The Admin Control Panel contains the most powerful tools available to Invision Community. This is already a very secure area with a separate login with an option to add two-factor authentication to the login flow.
Part of the session authentication has been a special key in the URL. While we have protection in place to prevent this special key being discoverable by a malicious user, there remains an incredibly remote theoretical chance that this could happen with a series of complicated steps. There was an additional annoyance that you are unable to share links within the AdminCP to members of your team due to the increased protection to keep URLs safe.
As of Invision Community 4.5, we have removed the special key from the URL and moved it elsewhere in the session authentication flow. This means that it's impossible to fetch the special key via the URL and links can now be shared and will survive a login action.
Text Encryption
There are a few areas within Invision Community that we use text encryption to allow us to save data in the database in a format that is encrypted when saved and decrypted when read. This protects you in the incredibly remote event of your own hosting being compromised and your database downloaded (of course, our Community in the Cloud customers do not need to worry about this!)
Invision Community 4.5 improves on this encryption by using PHP's built-in methods which give "bank-level" security to our encryption.
Security is critical to the success of your community, and we are always proactive in improving security throughout Invision Community.
Do you have any comments on this entry? Let us know below!