Recent content by Sim

I will also say that Cloudflare does also allow you to add "allow" rules to poke holes through my otherwise broad ASN blocks. I had a situation where staff at an accounting firm were regularly visiting one of my forums (related to property investment, so relevant to their work!), but the staff...

That would likely be an Azure server that someone is using to probe other services. I would absolutely block the entire Datacenter ASN (and I do!) - but if I then discovered that other legitimate services are using that same ASN, it could be changed to a single IP address block. The thing is...

That's generally a very good idea - absolutely no reason you couldn't keep your server config in git for change tracking - can really help with identifying issues with your config. Just be mindful about storing credentials or other sensitive items in something that could potentially be accessed...

Personally, I use my Geoblock Registration addon to block entire countries from being able to register. You could also block them entirely from the Cloudflare level, but that could have implications for your overall traffic levels...

Jobs are not really intended to be used for delayed execution. I've not thought through all of the implications of implementing such a system. I suggest a different approach - have another table that specifies a user_id to be updated and a timestamp for when this should be executed. Then you...

Can the task be broken into smaller restartable chunks? Jobs are ideal for that. Can you give some more details about the nature of the task being performed? Is each task unique and independent? (eg sending an email or notification to one person), or is it performing the same process on a...

I think the cleanest way to implement something like this would be to simply add a new "tag_display" (or similar) column which allows the admin/moderators to optionally add an alternative visual display for certain tags, so the database lookup, URLs, etc would all remain lowercase, but the...

This is a bad idea from an SEO perspective. Tags are generally used for categorising content for SEO purposes and discoverability purposes. They are deliberately normalised to lowercase to reduce duplication. Allowing capitalisation will see the tags Xbox and xbox considered two separate...

Yeah, that's still phpBB you're trying to execute there - none of those paths in the trace relate to XenForo. XenForo paths will have src\XF in them - for example, the DB classes are at src\XF\Db\ I think you're executing the wrong upgrade process.

Bots are created at an increasingly rapid rate. Some are short lived, some are malicious and don't correctly identify themselves and some go as far as randomising their user agents. It would be impossible to try and cover all bots. KnownBots is my attempt to identify more bots than are...

The way I do this is to create a group called something like "[All posts moderated]" (the name doesn't matter - just choose something that you understand what is does). Set the "Submit content without approval" permission to "Never" - leave all other permissions as default. Now you simply...

How have you configured the email transport in XF? You generally don't want to use a gmail address as your forum email address - you can't set up SPF or DKIM for a gmail address.

FWIW - I've had some difficulty lately with malicious adverts occasionally taking over and redirecting to other pages. It's obviously coming from our ad network - I've complained about it and they insist that they are trying to get things blocked, but it does seem like some bad actors are...

No - Postmark is part of ActiveCampaign and completely unrelated to SparkPost - which is owned by Bird.

The good news is that my KnownBots addon simply extends the core functionality which already flags user sessions when it detects they are a bot - so if you want to indicate that somehow, the information is already there in the user session.