IPS Community Suite 4.5.0 Build 105100

Security

• Improved password strength checks to detect password values set identically to the account username or email address and to consider them weak.
• Improved method of encrypting certain text.
• Improved AdminCP session handling, removing the session ID from URLs and introducing alternate CSRF protections.
• Improved email change process to invalidate any pending password reset requests.
• Fixed user not being prompted for two-factor authentication when signing in from a new device.
• Fixed an issue where it was possible to bypass the messenger recipient count limit.
• Fixed a niche issue where it was possible in certain configurations to view others profile field attachments on the registration page.
• Fixed a race condition issue where it was possible to artificially inflate or reduce a user's reputation score.
• Limited password inputs to 72 characters max to reduce the chance of a malicious user forcing unnecessary computationally expensive operations on the server.
• Fixed an issue where AdminCP sessions may be usable longer than expected if a community receives little activity.

Core

• Added beta of Zapier integration for Invision Cloud communities.
• Added new activity feed and twitter feed widgets
• Added new view modes, enhanced existing and added more functionality to topic view.
• Added an initial onboarding screen in the AdminCP for new installations.
• Added the ability to filter members in the AdminCP by rank.
• Added the ability to mark a post as the solution without needing the full QA mode.
• Added the ability to ony show a preview of new private message / new content email notifications to stimulate re-engagement back to the community.
• Added the ability to have TikTok links become embeddable in an editor.
• Added the ability to select from stock photos when uploading images.
• Added the ability to disable advertisements on non-content pages and error pages.
• Added support for chunked uploading to Amazon S3 which allows for larger file sizes to be uploaded.
• Added support for PHP 7.4.
• Added support for Sign in with Apple.
• Added support for version 4 of the bit.ly link shortening API.
• Added new options to prune follows, known IP addresses, known devices, and item markers, and default options for some existing prune options have been updated.
• Added the ability for Club Owners and Leaders to create and manage static pages within their clubs.
• Added the ability to show content messages only to staff members (moderators).
• Added a list of members who reacted to content in the tooltip when hovering on the reaction icon.
• Added overview statistics pages in the AdminCP.
• Added the plugin version to the ACP plugin list.
• Added a type-ahead search option when selecting tags from a closed tag input field that contains more than 20 tags.
• Added support for non-English searches in Giphy when the site is using a language Giphy supports.
• Added additional static-type links to the sitemap file.
• Added the ability to filter by custom profile fields in bulk mail, group promotions and exporting member lists.
• Added the ability to create custom phrases within the language system.
• Added the Invision Community Marketplace to the AdminCP.
• Statistics can now be downloaded as CSV files.
• Added the ability for Club Owners and Leaders to manage the visibility of the members page.
• Improved referrals tracking and introduced a global community invite feature.
• Improved the live meta tag editor.
• Improved performance of several areas of the software.
• Improved in-AdminCP upgrader to be able to handle more types of upgrades and improve reliability.
• Improved "Allowed characters in display names" setting to give pre-defined options.
• Improved performance of thumbnail generation.
• Added a setting that determines which comment you see first when opening an item.
• Added the ability for administrators to force users to reset their passwords.
• Added pending club invites to the club directory sidebar.
• Added a setting to disable automatic language detection.
• Added the ability for members to cancel club join requests.
• Added the ability to include club content to widgets.
• Added the ability to include/exclude widgets in clubs.
• Added an AdminCP statistics page for Clubs.
• Added search term tracking and a statistics page to monitor search term usage.
• Added a clarification notice to the edit log on the front end when edit logs are pruned.
• Added a friendlier error message when uploads fail due to a server problem.
• Added current percentage completed to progress bars.
• Added ability to filter reputation given and received statistics in the AdminCP by date.
• Added a check for the PHP file_uploads configuration directive to the support tool.
• Added theme settings to set maximum logo width at each device size.
• Changing the default application will be logged to the ACP Admin Log.
• Added ability for club leaders to specify rules for a club, and force members to acknowledge them.
• Added the database name and username to database queries to identify slow queries between multiple installations on a single database server.
• Removed the separation by app in the block manager.
• Removed the ability to import profile photos from a remote URL to improve security.
• Removed the image proxy feature to improve security.
• Removed Digg and Delicious share links.
• Removed the "What's New" link from the user menu in the AdminCP if the administrator is restricted and cannot reach the page.
• Removed the newsletter widget from showing in the sidebar by default on new installations.
• Improved display name availability check when name contains multiple concurrent spaces.
• Improved memory usage when uploading large images by handling resizing and rotation in the user's browser, rather than by the server.
• Improved GeoIP lookup caches to store for longer periods of time.
• Improved randomization for widgets that order by "random".
• Improved logging of curl-related errors to include the URL that curl attempted to connect to.
• Improved host detection for guest page caching.
• Minor styling updates for embeds.
• Logging in anonymously is now more reliably tracked across multiple devices.
• Long quotes will now automatically truncate with a "Read more" link to expand the quote to improve usability when long quotes are used.
• Updates search compatibility for Elastic Search 7.
• Upgraded CKEditor to 4.14.1.
• Flagging a member as a spammer will now remove any profile cover photo they may have uploaded.
• The clubs map now centers around available clubs rather than showing a whole world view.
• Changed the redirect targets from clubs, to redirect to a club feature after the feature creation and when a member joines a club.
• Changed the "Maintenance Tasks Not Running" admin notification to check for two or more tasks that have not ran to reduce false positive notifications in the event a feature is enabled which enables a task which has not ran in a long time.
• Restored the ability to view a list of members through the advanced search without appending unnecessary extra parameters to the URL.
• Adjusted certain code to remove reliance on MySQL functionality deprecated as of version 8.0.17.
• Changed the parser to allow <picture> HTML tags through to prevent errors with RSS imports that may use them.
• Changed the content deletion process so that reports related to the content are no longer deleted.
• Added logging out as a controller that can bypass forced account completion when a login handler cannot prepopulate a username or an email address.
• Added rel="nofollow" to certain links in order to instruct search engines not to follow them.
• Added the ability to export member reputation points when downloading a member list from the AdminCP.
• Added a confirmation dialog to the "Restore default streams" button in the AdminCP.
• Improved Google Maps setup page in AdminCP.
• The Report Center now properly handles content pending deletion.
• Updated Google Charts to use the latest API (v47).
• Improved editing a members secondary group by automatically switching between Checkboxes and a Select menu depending on how many groups are present.
• Improved the way how traffic run tasks are called.
• Updated the email failure AdminCP notification to run on login instead of email send.
• Updated the recommended PHP version to 7.3.
• Search result snippets are now truncated on the server before being served to the browser to increase efficiency.
• Tags are now shown in search results/streams on mobile devices.
• Updated the URL used for Twitter oEmbed requests.
• Added support for converting words to links as well as acronyms in posting settings.
• Adjusted Easy Mode theme editor to remove support for gradients and simplify the user interface. Added support for 'invert' to easily create dark themes.
• Fixed an issue where some nodes may not be available in various areas of the software (for instance, forums not being available to move subforums to when deleting a parent forum, and custom Pages blocks not being available to select in the widget manager).
• Fixed attachments not being claimed when added to Club Editor custom fields.
• Fixed an issue where admin-validated post-before-register accounts would not trigger follow notifications to be sent.
• Fixed an issue where bulk mail content count filters caused an error.
• Fixed an issue where editing a comment and using a word filter entry configured to hold the content for moderator approval may not actually do so.
• Fixed an issue where stream filters were not updating when the time period was changed.
• Fixed an issue where items in the main menu "more" overflow can appear in the wrong order.
• Fixed public club content not showing in streams and searches for guests.
• Fixed an issue where anonymous users may be displayed in the "Who's Online" widget.
• Fixed an issue where the files overview member link targeted the wrong location.
• Fixed an issue where admin control panel failed mail notifications could show a template error.
• Fixed an issue where predefined tags would not show in category settings when using a closed system.
• Fixed an issue where searching PMs would only show 25 results.
• Fixed an issue where incomplete members may not be cleared out of the database.
• Fixed an issue where Mapbox geolocation could return invalid location data in some circumstances.
• Fixed an issue where mass moving/pruning members could return no results.
• Fixed an issue where choosing to move club content while deleting a club resulted in that content being deleted instead of being moved.
• Fixed an issue where 'and' could be duplicated in lists of followers.
• Fixed an issue where the selected security questions during registration may reset if the form reloads with an error.
• Fixed an issue calculating member's age in some locations.
• Fixed an issue where groups could not be configured to allow reporting of personal conversations.
• Fixed an issue where HTML advertisements could be saved without any HTML code, resulting in a PHP notice being triggered when previewing the ad.
• Fixed an issue where dates can show in the wrong format in some configurations.
• Fixed an issue where uninstalling an application may leave behind attachments for that application.
• Fixed an error that can prevent inline notifications from showing up.
• Fixed an issue where the stream condensed/expanded toggles did not work when visiting the URLs directly.
• Fixed an issue where multimoderaction actions on ony page would redirect to the first page.
• Fixed a conflict that can occur when two or more external databases are set up for login handling.
• Fixed an issue where it was possible to bypass profanity filters when using quick title edit.
• Fixed an issue where the requirement checker may not highlight issues with a storage configuration if only one exists.
• Fixed an issue where the wrong file size may be shown in upload errors.
• Fixed an issue where content types that are not searchable may be shown as filter options in streams.
• Fixed an issue where the support tool would not clear guest page caches.
• Fixed an issue where personal conversation replies cause a member's "last post" date to be reset incorrectly.
• Fixed an issue where it was not possible to comment on a reported status update.
• Fixed some issues with status update/profile comment submissions that fail due to being too large.
• Fixed an issue where the default module may not be correctly set when installing a new application.
• Fixed an issue where meta tags could be added to pages they were not intended for.
• Fixed an issue where group promotion rules for date joined, last posted and last visited may not match correctly.
• Fixed an issue where disabling clubs in the settings would still leave the "Allow club moderators" setting visible.
• Fixed an issue where RSS exports may not show all available areas.
• Fixed some issues tracking and resetting limits when a per-post attachment limit is applied to a group.
• Fixed an issue where giphy thumbnails may show distorted if your "Maximum image dimensions to display" setting is set very low.
• Fixed an issue where guest cache may throw an error if a database issue is encountered.
• Fixed a potential issue that can occur when upgrading with InnoDB tables when MySQL is set to use MyISAM by default.
• Fixed an issue where unnecessary profile sitemap files may be processed.
• Fixed a javascript error that can occur due to lazy loading in some cases.
• Fixed an issue where the drag handles may not show up correctly when attempting to adjust the tab order on the club nav bar.
• Fixed an issue where certain URLs may not be fetched as expected.
• Fixed an issue where members that can hide their own content may not people to hide items when creating them.
• Fixed an issue where blog entries do not update club last activity time.
• Fixed an issue where it was not possible to move club content to other clubs when deleting sections.
• Fixed an issue with certain embeds (such as Spotify) in certain environments.
• Fixed an issue where the "Flagged as spammer" email notification would be missing the details about who was flagged as a spammer.
• Fixed Unsubscribe Links not working in some cases when Email Link Tracking is in use.
• Fixed an issue where resorting hidden content in the Moderator CP redirects you to the report center.
• Fixed an error viewing reports of content items queued for deletion.
• Fixed signature images not displaying in the AdminCP when image lazy loading is enabled.
• Fixed an issue where editing content meta messages will not show existing attachments on the edit form.
• Updated HTMLPurifier to 4.12.0.
• Removed the ability for an administrator to override a user's time zone.
• Centralised RSS importing and added support for image enclosures on export and import.
• Fixed an issue where multiple YouTube embeds in an editor could lead to the editor wrapper overflowing its bounds.
• Fixed default country when entering an address being incorrectly detected for some users.
• Fixed an issue where restoring certain default menu items resulted in missing language strings.
• Fixed an issue where two moderator groups applying to a single user may allow the user to revoke warnings even if they do not have permission.
• Fixed an issue where carousel widgets would not be scrollable in certain configurations.
• Fixed certain content links such as links to direct posts not always taking you to the correct page in a multipage topic.
• Fixed an issue where setting a limit for the maximum items on a sitemap would include the oldest instead of the newest content.
• Fixed an issue where a 'flash of unstyled content' may appear in Firefox when lazy-loading embedded content.
• Fixed an issue in the AdminCP where a tooltip would appear off the edge of the screen where a member had no display name set.
• Fixed an issue where deleting a reaction would not redirect back to the reputation settings tab.
• Fixed an issue where terms and tags can be removed from search queries in some circumstances.
• Fixed an issue where some addresses could be saved with a location unintentionally.
• Fixed a styling issue with the 'Back Button' in the Menu Manager.
• Fixed potentially being sent to a random page when splitting comments from one content item to another content item.
• Fixed an issue where deleting reactions would leave the images on the file system.
• Fixed some structured markup validation concerns.
• Fixed an error that can occur for guests who have chosen to use a theme which is subsequently deleted.
• Fixed an SQL error during certain (intentionally invalid) AdminCP login attempts.
• Fixed an issue where a database can occur if the login form is submitted with no credentials supplied in specific scenarios.
• Fixed an issue where clubs may reflect an incorrect last activity date.
• Fixed an issue where signature options would still show when ignoring users even with signatures disabled.
• Fixed an issue where the member last visit time may not be set for new members.
• Fixed an issue where checkbox set custom fields could not be set as searchable.
• Fixed an issue where an administrator who could manage member moderators or group moderators (but not both) will not see the correct options when adding moderators.
• Fixed extraneous spaces/newlines displaying on some forms.
• Fixed an issue where partially uploaded files can be orphaned on disk.
• Fixed an issue where topic links were not correctly using the user unread/first/last post preference.
• Fixed an issue where members could be informed they were on mod queue because of a warning that had already expired.
• Fixed an issue where already pending post before register content is not processed if the feature is disabled.
• Fixed an error that can occur when a cron-based request results in content being parsed, such as when running tasks via cron following an upgrade from 3.x.
• Fixed an issue where saving group display name changes with blank values caused an error.
• Fixed a potential SQL error that can occur when upgrading from IP.Board 3.4.9.
• Fixed an issue paginating in tables when certain special characters were included in the URL.
• Fixed a potential error that can occur when uninstalling some third party applications.
• Fixed an issue with language pack list formats when first adding a new language pack.
• Fixed an issue where when lazy-loading is enabled, a lightbox would not be available for images that had not yet loaded into the browser.
• Fixed an issue where the REST API would return an error while fetching a clubs data.
• Fixed an issue where clicking Back in a browser after navigating to a new page of a table would not load the correct content.
• Fixed an issue where dropdown menus in the main navigation bar may disappear when moving the mouse cursor.
• Fixed a styling inconsistency in the AdminCP with the clubs page when clubs are disabled.
• Fixed an EX0 error that can occur with widgets in specific configurations.
• Fixed an issue where deleting a comment or review may incorrect update the count on the respective tab or remove the tab altogether.
• Fixed clicking a tag not working when Friendly URL's were disabled.
• Fixed an issue where certain columns would not be automatically detected when importing members from a CSV.
• Fixed an error viewing clubs on PHP 7.4.
• Fixed an issue where anonymous users may show online to administrators when they are not online.
• Fixed Twitch embeds broken following an update on Twitch.tv.
• Fixed an error using advanced table searches on PHP 7.4.
• Fixed excess whitespace being included in the editor when certain text is used in an editor for a promoted item.
• Fixed an issue using the "insert existing attachment" feature in the AdminCP in some cases.
• Fixed some outdated phrasing when unsubscribing from emails.
• Fixed an issue where the "Keep aspect ratio" option when editing image dimensions in the editor may not default correctly.
• Fixed an incorrect message showing when banning an account in the AdminCP.
• Fixed an issue where links in plain text emails could break with click tracking enabled.
• Fixed editor buttons not replacing multiple instances of a {content} variable.
• Fixed an inability to edit a post containing a badly embedded quote.
• Fixed an issue where emoji may still replace in the editor even if the setting is disabled.
• Fixed background task progress bar reporting incorrectly in some cases.
• Fixed quicksearch menu closing on the front end when clicking on certain rows instead of the labels directly.
• Fixed some javascript errors that can occur when the page is updated via AJAX.
• Fixed an SQL error that can occur during upgrades in some cases.
• Fixed page title reflecting "undefined" when editing permissions for certain editor buttons in the AdminCP.
• Fixed some buttons in the AdminCP moving into the page header out of the tab the button belongs to when reloading the page.
• Fixed the "note for member" field when warning a member being wiped when the reason for the warning is changed.
• Fixed an issue where the REST API can output other members 'last activity' times regardless of anonymous setting.
• The "Mobile Nav Background" theme setting has correctly been renamed to "Main Nav Background".
• Fixed a broken page layout on the Username History page.
• Attachment titles are no longer excessively cropped vertically.
• The Reconfirm Terms page has been wrapped in .ipsBox to improve contrast in certain themes.
• Notifications to the author are no longer sent for linked content inside quotes.
• Fixed an issue where "Posting" and "Profiles" AdminCP menu items may not show even if the restricted administrator has access to parts of them.
• Fixed an issue where validating members showed in search results.
• Fixed an error with Windows that can cause certain date and language string values to be broken.
• Fixed template disk cache files not being made writable in some environments.
• Fixed an issue where invalid SMTP email credentials could cause content to be posted twice in some cases.
• Fixed performance issue sending usage report.
• Fixed an issue viewing all reactions for individual comments.
• Removed certain logging when using OAuth2 which was unnecessary and could consume a lot of database space.
• Fixed an issue where the front session handler may be unintentionally started when using \IPS\Output::i()->sendOutput().
• Removed the Delete and Flag As Spammer buttons from member rows when filtering on groups.
• Fixed an issue where the front session handler may be unintentionally started when using \IPS\Output::i()->sendOutput().
• Fixed an issue where uploading a new emoticon with IN_DEV being enabled would result in an exception with PHP 7.4.
• Fixed an issue where a previous bug could cause the remote image proxy task to error.
• Fixed an issue sorting personal conversation IP address lookup results by date in the AdminCP.
• Fixed birthdays sometimes not showing on profiles.
• Fixed an issue where profiles of users that have followers disabled would show an error with PHP 7.3.
• Fixed an issue where newly created club icons do not show when editing.
• Fixed mobile Twitter links not automatically embedding.
• Fixed a rare error that can occur when deleting a block using the block manager.
• Fixed an issue where copying a node (such as a forum) that had content pending moderator approval can result in the new node indicating there is content to approve when it is empty.
• Fixed an error preventing certain image uploads pasted into the editor from uploading correctly.
• Fixed an issue where it may not be possible to save the 'exclude groups from leaderboard' setting.
• Fixed an issue displaying colored emoji in some environments.
• Fixed an issue where the live meta tag editor wouldn't save the form if only the site title was set without having any further tags.
• Fixed autocomplete fields not initially expanding to show all text when a value is pasted into the field.
• Fixed deleting a category, while also deleting children, not deleting child categories further than the first child level.
• Fixed an issue where new comment notifications could show guests in the commenter list when using post before register.
• Fixed an issue where club filter options would show in activity streams when no clubs were available.
• Fixed an issue where it was not possible to complete a password reset if the community was offline and email click tracking was enabled.
• Fixes an invalid “Thank you for vote” message when voting validation fails.
• Fixed an issue where deleted comments in certain applications may still show inline to moderators with approval to view them.
• Fixed an issue where setting up 2FA Security questions would result in an error with PHP 7.4.
• Fixed an issue where coverphotos set to bottom-align on desktop would show gapping on mobile.
• Fixed an issue where large images in emails may not behave responsively on all devices.
• Fixed page title duplicating in the Twitter share box when clicking the Twitter share link.
• Fixed an undefined variable in an upgrader HTML template.
• Fixed an issue with carousels not advancing to the next image in some edge cases.
• Fixed an issue where paginating in a comment feed (e.g. a topic) wouldn't work reliably if an anchor (e.g. #comment) was present in the URL.
• Fixed an issue where users may be incorrectly prompted about new replies in a topic when navigating to a different page via the "back" button.
• Fixed an issue in the mobile hamburger menu where sub-items may appear to be 'missing' because the menu is actually scrolled down too far.
• Fixed issues with submenus sometimes opening off-screen when on small devices or when using an RTL language.
• Fixed an issue where in certain situations, autocomplete results would be incorrectly positioned on mobile devices.
• Fixed an issue where hovercards may sometimes display partially off-screen.
• Fixed an issue where the progress bar can exceed 100% when enabling designer's mode.
• Fixed an issue where new-style Twitter embeds may appear narrow in some browsers.
• Fixed an issue where the filesystem datastore directory configuration option may still show if selecting to use Redis for caching.
• Fixed a minor SEO concern reported by the latest version of Lighthouse.
• Fixed an issue where files may not be deleted when using S3.
• Fixed dialog window titles clipping out of view if paginating a table within a dialog.
• Fixed an error with the UTF8 converter that can occur in certain cases.
• Fixed # anchor being added to the URL in the address bar when closing the drawer element on mobile.
• Fixed the members/notifications REST API endpoint returning notifications in the wrong order.
• Fixed a potential syntax error when performing a MySQL search.
• Changed upgrades to write current upgrade step data to the database instead of to a temporary file on disk.
• Changed the support tool to only run database checks against enabled applications.
• Changed the auto-upgrader to only run database checks against enabled IPS applications.
• Removed custom theme CSS from AdminCP pages.
• Removed unnecessary down caret from submenus on the primary navigation bar in some cases.
• Removed the obscure hash from CSS and JS files to prevent duplicate files that are not always cleaned up.