Jump to content

Matt

Management
  • Posts

    69,957
  • Joined

  • Last visited

  • Days Won

    624

 Content Type 

Downloads

Release Notes

IPS4 Guides

IPS4 Developer Documentation

Invision Community Blog

Development Blog

Deprecation Tracker

Providers Directory

Projects

Release Notes v5

Forums

Events

Store

Gallery

Everything posted by Matt

  1. This is a great question, so I asked it on Twitter to get some advice from some experienced community managers:
  2. I would say that bulk emails are very different from a targeted post-registration drip campaign but I appreciate that in your part of the world, companies are actively being handed fines for non-compliance while the rest of the world shrugs.
  3. My understanding is that you can send emails related to the service they signed up for. It's when you start sending them adverts for other services that you are on shaky ground. Sending a sequence of welcome emails and guidance how to use the community is fair, and I cannot see how this would be deemed "illegal". We work with brands in the EU who have whole departments dedicated to legal and they have no issue with a welcome email sequence.
  4. I don't really see what advantages the others have over CKEditor 5. Whichever we choose, there is a significant time investment to rewrite our plugins and parts of our uploader, etc.
  5. You can set the write permissions via constants: 'IPS_FOLDER_PERMISSION' => 0777, // Writeable folders 'FOLDER_PERMISSION_NO_WRITE' => 0755, // Non-writeable folders 'IPS_FILE_PERMISSION' => 0666, // Writeable files 'FILE_PERMISSION_NO_WRITE' => 0644, // Non-writeable files
  6. Hi Chris, I've opened a ticket for you. We'll take a look and see if we can see what is going on.
  7. This is fixed and will be in the next 4.7.0 release.
  8. Automated tools are very useful in helping you ensure your site is compliant and secure but sometimes they mark you down for things that just aren't a problem in the real world. We work with some of the world's biggest brands who often bring in third party security specialists and not once have we been asked to use this prefix. If you redirect your site from http to https then the impact is minimal. The blog linked above was written in 2017 when SSL was very much optional for most of the web, but now browsers really enforce SSL so it's less of a problem. The author and MDN note that not all browsers (including Safari and Firefox) support the prefix and will serve the cookie anyway making it a little pointless outside of an internal network where you can enforce which browsers can be used.
  9. Are you concerned about brute force log in attempts? We have built in protection for this as multiple failed attempts to log into a user account lock the account for 15 minutes.
  10. I believe CKEditor fixed this in their 4.18.1 version. Invision Community 4.6 uses 4.18.0. We have upgraded to 4.19 for Invision Community 4.7, so the issue should be resolved then.
  11. We have not tested extensively with MySQL 8. Our recommended version is 5.6 (MySQL went from 5.7 to 8). I suspect MySQL 8 is the issue here.
  12. I agree with checkout, but I'll need to think about /search as this would exclude the tag search results which have some SEO merit.
  13. It's worth using the browsers dev tools to check the console to see if it's an error loading a CSS file when this occurs.
  14. A fix is in review and should make it for the June release.
  15. Excellent sleuthing @Andy928! A fix is now in review and may just make it for the June release.
  16. This should make it into the June release.
  17. MySQL can hold onto a lot of data even when you delete rows. You can consider running a command like TRUNCATE ibf_core_cache via your SQL manager (always make sure you have a back-up, etc). It's safe enough to do this on core_cache as as the name suggests, it's just a place to store computed data for re-use. You'll probably find the usage of the core_cache table drops drastically.
  18. We can look at this a little. The -600 error is "too large", so it looks like it's not failing gracefully if the image is larger than the allowed space via their member group permissions.
  19. Welcome to our May developer's update! May has been a bit of a whirlwind as we worked through the cloud platform feature set along, the backlog of existing issues reported to us and a new feature coming to all platforms. Along with the usual bug fixes in the backlog, we also worked on a few popular requests, such as adding hCaptcha as a new CAPTCHA option. We've seen this battle spam bots much more effectively than the existing methods, so if you're being hit by a lot of spam, consider upgrading to 4.7.0 and enabling hCaptcha. Jordan announced the new alerts feature here. It's a new way to reach out to members (or entire groups) and ensure they read and act on the alert. Many configuration options make it a very flexible feature useful for one-off alerts to a single member. It can also be used as a welcome message as part of your onboarding process. Invision Community 4.7.0 (also known as the June release) will have tentative support for PHP 8.1. While we have tested the core apps extensively, you should check with any third party developers to ensure their apps are PHP 8 ready. We intend to move to PHP 8.0 as the minimum version later this year (and our dev team is excited about this, they can't wait to use mixed return types, which is as exciting as it gets for us most days). Here is the full change log for the June release. Core - Added alerts functionality. - Added hCaptcha support. - Added a setting to exclude groups from search logs. - Added support for PHP 8.1. - Increased minimum PHP version to 7.4 and recommended version to 8.0. - Added a solved/unsolved filter for activity streams. - Changed Marketplace search to 'AND' mode for more accurate results. - Changed 'member download' to output comma-separated values instead of tab-separated values to be consistent with member import. - Changed the poll behaviour to allow everybody to view the poll result of closed polls. - Improved the email editor to show the full email name while editing it. - Updated CKEditor to 4.19.0. - Moved the stream subscription links to an own menu item. - Fixed an issue that may prevent attaching audio files to content. - Fixed a minor typo in the forms.css template. - Fixed upload area not showing on minimized editors for guest users. - Fixed an issue where post counts were incremented even when a new item was held for approval via the profanity filters. - Fixed an issue where filters and sort options do not persist between deleting members in the Admin CP. - Fixed an issue where sitemap may show entries from offline applications. - Fixed an issue where support account may show as the latest registered member. - Fixed an issue where the upgrade process would fail to finish because of duplicate DB queries. - Fixed an issue where the default streams had a broken time period. - Fixed an issue where widgets may not be available even with enabled apps. - Fixed an issue where status updates where appearing as search results even if the user had no permissions to view profiles. - Fixed some issues with the online status indicator in account settings. - Fixed an issue with deleting bulletins when deleted remotely. - Fixed an issue where clicking on the reorder-menu link in clubs can add multiple reorder icons. - Fixed an issue where managing Widgets via the AdminCP > Applications > Dev Center meant that Yes/No toggles could fail to work. - Fixed an issue where the block submission filter failed to catch loose matches when in the middle of a word and/or using non latin characters. - Fixed an incorrect link on a modal popup when trying to follow a member when the member hasn't configured their preferences. - Fixed an issue fetching Clubs via the REST API when they have custom fields. - Fixed an issue when viewing a list of awarded badges if one was earned by a rule in a deleted application. - Fixed a missing `</ul>` in the poll template. - Fixed an issue where the 'approved content' notification (and any newly added notifications) might not have valid default options until edited via AdminCP. - Fixed missing padding on the AdminCP file locations modal. - Fixed some UX issues when revoking an OAuth access token. - Fixed an issue where non-image attachments inserted via the editor may not download. - Fixed a missing language string in member history when spam defense system applies moderation to a new member. - Fixed an issue with 'solved' push notifications linking to a non-existent page. - Fixed an issue with the Zapier Extension when PHP was running in CGI mode. - Fixed an issue where rank progress would still show in profiles when no ranks exist. - Fixed an issue using the ban filters in member group promotion rules. - The Editor Preview Button was removed from ACP Editors. - Removed the deprecated FX Country code from the Geolocation class. - Removed the ability to rebuild existing attachment thumbnails due to an incompatibility with content attributes required for lazy-loading. - Removed the SQL Toolbox. Forums - Improved the fluid-mode per forum filters to remove a page reload, and to reverse the filter checkbox status to make it clear which are being viewed. - Fixed an issue where checking an archived topic for new replies when you ignore other members may always show a 'new' post has been created. - Fixed an issue where top posters in the topic statistics section may show in the wrong order. Gallery - Fixed an issue with the followed Gallery Images page. - Fixed an issue with rebuilding thumbnails on legacy communities where the original image may no longer exist. Pages - Added the missing `__indefart_cms_page` language string. - Added copy buttons on the modal that displays the HTML to copy to embed blocks elsewhere. - Improved search indexing speed of comments when Elastic Search is used. - Fixed an issue where sorting by a numerical field could duplicate the option with an incorrect label. - Fixed issue with 'image upload' block carousels not working in the sidebar - Fixed an issue where custom Yes/No fields when used as a database filter were ignored when further sorting. - Fixed an issue where categories could have broken breadcrumbs. - Fixed an issue where entering a blank value for a required decimal field would save the value as 0. - Fixed an issue where using a Yes/No field as a database filter may cause the custom sort form display to not allow toggling of the Yes/No field. - Fixed an issue that allowed duplicate template group names in some circumstances. - Fixed an issue where who's online widget blocks would throw an error while creating or editing them in the ACP. Converters - Fixed an issue rebuilding some profile photo images. - Fixed an issue where vBulletin `[video]` tags would not be parsed if the video ID contained a hyphen. Commerce - Added ability to require an active subscription to use community. - Added support for Stripe - Apple Pay Domain Verification Files on Cloud. - Improved Subscriptions including up/downgrading to other subscriptions and offering limited free subscriptions. - Improved performance when updating a large number of existing purchases. - Removed deprecated Amex Express checkout options. - Fixed some issues that can occur when requiring a subscription or product to be purchased during registration. - Fixed an issue where a card would not be auto-billed if the customer did not have an address. - Fixed a niche issue where a renewal invoice (for manual payment) would not be generated if a PayPal Subscription was cancelled on an active purchase. - Fixed an issue where account credit would not be used for an invoice if the credit remaining was the exact value of the invoice. - Fixed an issue calculating the next renewal date when upgrading between Subscriptions that may use a different renewal period (i.e. monthly vs annually). Calendar - Fixed an issue where the day view wouldn't show todays events when it's being used as the default calendar view. Downloads - Fixed an issue where change logs may show the wrong published date if the file description had been edited since the last update. - Fixed an issue where creating a downloads category with the "Keep previous versions?" Setting being disabled would result in a DB error. Platform - Added real time and historic trending data in sidebar blocks and leaderboard. REST, Webhooks and Zapier - Fixed an issue where the 'hidden' content item filter would be ignored for any content type except topics. - Fixed an issue where the date parameter for the 'Edit a topic' endpoint was not updating topic/post post date. Key points for developers are as follows: Added PHP 8.1 support; however, we have silenced deprecation errors for core applications and system directory as we work through those in the following releases. Updated Whoops to 2.14.5 Fixed an issue where managing MFA in the Account Settings would result in an IN_DEV CSRF key warning. Fixed an issue where you could not pass variables to the {hextorgb} theme plugin. Fixed an issue where creating or editing a forum with IN_DEV being enabled would return an error. Fixed an issue with ips.ui.infiniteScroll.js when using FURLs. Fixed a syntax error in the core unsubscribeStream.txt email template. Member filters will only be processed/visible for group promotions if they have a matches() method. That's it for now; see you on the forums!
×
×
  • Create New...