Recent content by stromb0li

When calling /api/media-category/{id}/content all photos for that category load; none of it is paginated, even if passing the page parameter. For categories/albums with hundreds or thousands of images, this can be abused as a way to attack the server, as it generates enormous responses on...

Bubbling up an old thread, but looking for reaction a reaction API as well. Interestingly, you can add/remove a reaction by POST, but you cannot see the reaction type left or get the reactions for a given post/message.

Actually, this looks like user error/a bug on an add-on I have when processing the attachments (the attachments are already processed, but it's trying it again). This can be marked as not a bug. Sorry about the noise!

One thing I've noticed is if requests are made by API, a member doesn't show up in the online list or show what page they are browsing. I'd assume this is by design because you can't assume a "screen" based solely on API call. In this case, is there an API that should be called to update the...

Our community has a section for photographers and it's not uncommon for them to upload images up to 20MB in filesize. While upload and attachment to the post is fine, on submission, XenForo will attempt to process them all at the same time, which leads to extremely high memory utilization...

I wish XenForo would consider pivoting to an OSS model like what nodeBB has done. Continue to sell the cloud offering and have paid support plans for those of us that want quicker turnaround on bug fixes (I'd pay for it). I still find it crazy the homepage of xenforo has customer logos and...

That did it!!!

I'm fairly certain this is a javascript bug. When webp is disabled, you can see the original blob image size is correct when the browser tries to attach (in my case, a 20MB image): When upload actually happens, you can see the original client image payload is compressed to 3.3MB: When image...

Sorry to bubble this up, but does anyone have any ideas on a workaround for this, even if it's a crude hack?

Reopening since other threads are locked: https://xenforo.com/community/threads/rest-api-add-ability-send-json-bodies.168785/ https://xenforo.com/community/threads/implement-json-requests-to-rest-api.190390/

Always helps

That was it! Forgot to request for the parameter from the client 🤦‍♂️

I have an add-on I'm building, but am struggling to identify why I cannot see the api scope I have defined showing up on the user conscent page: <?xml version="1.0" encoding="utf-8"?> <api_scopes> <api_scope api_scope_id="myapp:delete_hard"/> <api_scope api_scope_id="myapp:read"/>...

I'm unable to disable an OAuth2 client. I see "Your changes have been saved.", but on page refresh, the app continues to show enabled. Edit: I can disable/enable if I check/uncheck the "Client is active" checkbox in the app. It's only the toggle buttons that seem to not persist the change.