security

Link Truth – Know Where Links Really Lead Not every link is what it appears to be. A link displaying a familiar website address could actually lead somewhere entirely different. Whether it's an impersonated website, a disguised destination or a misleading subdomain, visitors may not realise...

🔐 [XTR] Login as User Enterprise-Grade Account Management for XenForo What Is This Add-on? [XTR] Login as User is a professional account management add-on that allows authorized XenForo administrators and moderators to temporarily access a member's account for support, debugging, or...

N.O.V.A. Backup Vault is a complete local backup and protected recovery add-on for XenForo 2.3. Main features • Manual database, file or complete backups • Scheduled backup profiles with configurable retention • Private storage outside the public document root by default • Immutable...

New in 1.0.4: Login Guard Eggy Login Log now includes Login Guard, a new optional security and account recovery system introduced following customer feedback. Login Guard can detect excessive failed login attempts against individual accounts or IP addresses and automatically notify...

Staff-controlled email changes for XenForo Eggy Email Change Approval adds an approval layer to member email address changes. Instead of allowing a requested email change to be applied immediately, the member confirms the request with their current password and the change is placed into a...

Challenge suspicious bots before they scrape your forum XF Bot Guard protects public XenForo pages from abusive bots, scrapers, fake browsers, crawler abuse, and bot-driven server load. It is built for the traffic normal anti-spam tools often miss: bots that do not register, do not post...

Hi, I just saw this post on TheAdminZone: https://www.theadminzone.com/threads/i-assume-this-is-not-good-news-for-xenforo.156931/ about the Northern Ireland High Court case involving Tattle Life, and honestly this I find this pretty concerning as a XenForo customer. According to the judgment...

A lightweight add-on that adds two new permissions under General Permissions to control whether users can change their email address or password through the forum's account settings. Features: Block email changes — Adds a "Can change email address" permission Block password changes — Adds a...

Website: https://shadowcoders.net Overview ShadowCoders.net is a technical discussion forum focused on cybersecurity, programming, systems, and long-form research. The goal is to provide a high-signal space for detailed tutorials, ethical security discussions, OSINT research, and...

We have an option for any of our members to use 2FA if they want to, and we encourage it for members engaging in our peer-to-peer marketplace. I don't like the ability to use email authentication, though, for a variety of reasons. One of them is that I don't trust our email system, and am...

Trying to open the forum and have been told the captcha doesn't work. The only captcha I see is questions which only a user of the forum would know. One person mentioned something about butterflies? Any ideas on which captcha to set?

IP Threat Monitor is a professional security addon that protects your XenForo forum from malicious bots, DDoS attacks, and excessive request traffic. With its cache-first architecture, it reduces database load by 98% while delivering 5-10x faster response times. SEO-friendly design protects...

Server error log XFES\Elasticsearch\ConnectException: Elasticsearch error: cURL error 28: SSL connection timeout (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://forum:SECRETPASSWORD@internal.domain.tld:9200/forum/_search src/addons/XFES/Elasticsearch/Api.php:447...

This Add-on allows to set a security lock on (compromised) users accounts to contact the admin so access to the account cannot be regained automatically / without admin intervention. This could be useful if an account is compromised and used by automated software / spam bots. The Add-on also...

Hi, It's a long time since I've used XenForo, I've installed the latest version on my local PC to test it first... But once I put in on my website, after install are there any tips you guys can give me, such as do I need to delete the /install/ folder? and what about this file...

ImageMagick just released a patch for a serious information disclosure vulnerability. I haven't tested whether this affects XenForo, but it probably does. You should disable ImageMagick and use GD instead, if possible; ImageMagick is prone to serious vulnerabilities. If that isn't an option...

nicodak submitted a new resource: [DigitalPoint] Security & Passkeys - FRENCH translation - French translation of the [DigitalPoint] Security & Passkeys add-on Read more about this resource...

Adds trusted device management so users can manage their own devices, with device approval workflows and login security controls for XenForo 2.x. Key Feature(s): Block own devices or unblocked own devices and sign-out own devices Notifications when a new device has login Email notification...

Hi guys, anyone has an idea how to protect a trial version with the highest possible security against missuse? I thought about hwid but you can spoof it. There has to be a way to secure a trial against users using it over and over again by bypassing the lock. As I said, logging the ip, hwid or...

Track and analyze user visits based on country and IP data. Features 🌍 MaxMind GeoIP Support: Accurately resolve user locations with GeoIP data. 🎯 Selective Tracking: Track visits only for specific users instead of globally. 📑 Report Creation: Automatically generate reports when a tracked user...