Hi, recently, I found an XSS vulnerability on one of the Russian-language forums. After several hours of research, the following was clear:
1. The forum where this vulnerability was noticed did not filter href. Therefore, it was possible to substitute the following script...
If administrator knows about "reaction title" in phrases, he can translate reactions. We're on own forum use this.
And XenForo respects receiver alert language, but only in alerts. In push, he uses phrase for selected language who reacts:
Receiver uses Russian language, i [user who reacts]...
It may be an issue or someone is more expert than me or perhaps I didn't read that anywhere in here.I 've just updated with XF 2.1.8 fully auto by the CP.All ok till now except a notice that I haven't before;When you open the bell with the alerts,you cannot redirect to any post that you have a...
Advanced Content Edit History
This add-on allows you to control the content edit history via advanced user group permissions.
Edit logs on member's profile page.
Daily max. content edit limit warning
I reproduced this bug here, on xenforo.com.
When any user reacts your post, XenForo forms "incorrect" HTML code.
From XF\Entity\UserAlert::render() you get HTML like this:
<a href="/index.php?members/2/" class="username " dir="auto" data-user-id="2" data-xf-init="member-tooltip">member</a>...
Not sure if this is intended or bug?
When a user has an idle Tab of XF Forum Page, and received new conversation or new alert notification.
Unread Count / Count in title and indicator on icon isn't updated automatically unless I load/visit another tab of the site or reload the page.
[XenGenTr] Warning system
Different announcements can be written for each forum.
The topic list can be shown as the lower, upper position.
In the subject, the editor can be shown as the topic above the editor.
Subject site view location
XenForo has a useful and extandable criteria system. Trophy and Notice systems are using the User criteria type already.
With this system, we can easily create different trophies (or show notices) to a users that match certain selected criteria.
But there are many more systems that are...
I am trying to send emails to all thread watchers. Many hosts have restrictions on amount of emails sent per minute/hour.
@Mike advised me to use jobs system to avoid timeouts.
I am absolutely new to jobs topic and have not found any tutorials but I did understand something.
As I understand...
Is there a stable and clean way to get all users that are watching given thread including email subscription?
$watchers = getWatchers($thread);
I searched for this in xF code and found only this very strange construction:
I also found...
Hello, How can I get Alerts over tabs like " Media","Resources" whenever a new Media or Resource is being posted.For smaller community forums that would be much better.It would be very good if we get ALerts over the navigation Tabs when we post something in the particular page or...
Is there a way to have visual notifications when new content is posted on Watched Forums?
Our forum has a section for Commercial Announcements, where software developers post news about their products, promotions, sales, etc. I'd like to get a notification when they start a NEW thread. At...
PLEASE BEWARE!!! This addon is unmaintained, no support is offered with this any longer.
With this add-on you can change notifications of XF to something like Facebook's notifications (or even better :D )
There are 12 different designs which each of them have their special effects:
I'm using user mentions often (I mean, when you write @username). I've seen that the user can see an alert, but seems that he doesn't receive an email notification.
Is there a way to sent him an email?
Thanks in advance.
I think could be a beautiful and useful addon, something that when you receive a new alert/notification on the Forum, the browser plays a little alert (as a "pop" o something like) so if you have (for example) the forum page opened in the tabs, but it isn't the tab that the user is actually...
Send an alert or email from xenforo to a member who has downloaded a resource to invite them back to rank the resource.
It would provide valuable input for forum owners on the quality of resource and make a community member feel more involved when this also then results in improved quality of...
I am experimenting with @Chris D's Pushover Add-on (which is really great by the way).
In my forum I want to have a specific "Comms" node that is reserved for emergencies only. So if someone posts in there he is in real trouble.
If the Alert system could be used to give forum nodes specific...
This add-on allows your members to receive notifications when conversations or posts in conversations are read.
Conversation read alerts can be disabled through user preferences
The readme is available HERE.