[Andrew] Moderator Panel 2.0.9

[smallwheels]

So from the dev's point of view could be a completely different approach, and I'm sure Andrew will know what (and IF) to do about.

Again: You are barking the wrong tree. The add on has not been updated for almost two years and was and is totally fine. It is provided for free, the work of the author is basically self exploitation.
You on the other hand are using a commercial so called "security solution" that costs 144$/year according to their webpage, describes itself as "A Smarter Approach to Server Security" and claims "We stop threats at every stage with multiple, integrated layers of protection." Instead, it does not seem smart at all but rather not trustworthy. As often, it seems to be so called "security theater" in the long tradition of snake oil by vendors of anti virus software which creates good profits for the seller, creates (intentionally) the wrong impression of protection for it's users - and nothing but trouble and extra work for people like Andrew. He did nothing wrong and clearly nothing dangerous. The "security solution" instead created issues. Yet you ask Andrew to do something about it instead of addressing the issue where it belongs and where it is caused: By the commercial company that sells the snake oil for good profits and possibly by your webhoster, if it is him and not yourself who installed this snake oil.

If even your friend Claude says this false positive would be a common issue with said "security product"...

That pattern — inline HTML with an anchor tag inserted via bulk DB write — is a common false positive trigger for Imunify360's OSSEC/malware scanner rules.

...the company behind this product should be well aware of that as well - and yet the do not improve their product and yet you do not complain with them but are barking the wrong tree. Why? The solution is obviously to get rid of the snake oil as it does not work, is harmful and maybe dangerous, hinders perfectly fine software from working and stops you from installing the software that you want to use. Why should one want such a product?

 

[El Porcharo]

I don't understand the reason for all this controversy of yours.

I'm not paying that license, I pay the hosting. And I won't waste any more time arguing with you or writing down a ticket for bothering the hosting support and my self about this.

I trust Andrew.
At the end of the day I assume this file is not important as the name suggests the use case itself. So just leave it there and see what's next.

For me the matter ends here.

 

[smallwheels]

And I won't waste any more time arguing with you or writing down a ticket for bothering the hosting support and my self about this.

So you don't want to bother the people you pay for your hosting and that caused the problem, but you have no issue bothering the person who gifted the add on to you for free? Wow. What exactly do you expect Andrew to do?

At the end of the day I assume this file is not important as the name suggests the use case itself.

Seems you are a professional.

Play stupid games, win stupid prices.

Given your behavior I can understand if people do not publish their add ons, even if they were in principle willing to do so and they were useful to others. It is just not worth the bs that comes back as a result.

 

[El Porcharo]

Useless controversy.

What exactly do you expect Andrew to do?

Nothing more than poppin' up and say something about. Again, I don't think the empty file is a vital issue even if I didn't investigate further, so I won't bother for now.

Furthermore, I replied once again despite I said I wouldn't, but this is my last message on the matter since I'm not carrying on stupid arguments to harsh replies that look like whining kids complains, so you'll be talking to yourself if you carry on.

 

[unproperlypropagated]

Any way to add a delete button to messages by mods on issues? Without editing the database.

 

[AndrewSimm]

Sorry, getting caught up here. What exactly is the problem?

 

[AndrewSimm]

Did the virus software produce any type of text or log?

 

[Mr. Jinx]

In my case imunify360 (running on DA) detected /src/addons/Andrew/ModeratorPanel/Setup.php as being malicious and cleaned the file.
A few days later, the file was restored. Probably due to a new virus definition file.

 

[El Porcharo]

What exactly is the problem?

We found out that the setup.php file was cleared out, looks like the culprit is Imunify (which is a server/hosting "software") as @hkymre reported above.

Not sure if my Claude's reply here might be of any help though.

 

[El Porcharo]

Did the virus software produce any type of text or log?

Well... they must have addressed it, since the file content has been restored a few days ago!

(for all my XF installations - 1 production + 2 staging copies)

 

[Nervy]

Could you add a retention/pruning option for the recent login log? On a large board the andrew_mp_recent_login table grows unbounded since there's no built-in cleanup. Ours is currently sitting at ~129M rows and is one of our biggest tables.

Ideally an admin option like "Days to retain login history" (e.g. keep last X days) with a cron that prunes older rows, similar to how XF handles moderator/admin log retention. That keeps the useful recent history for spotting alts while stopping the table from growing forever.

 

[AndrewSimm]

Could you add a retention/pruning option for the recent login log? On a large board the andrew_mp_recent_login table grows unbounded since there's no built-in cleanup. Ours is currently sitting at ~129M rows and is one of our biggest tables.

Ideally an admin option like "Days to retain login history" (e.g. keep last X days) with a cron that prunes older rows, similar to how XF handles moderator/admin log retention. That keeps the useful recent history for spotting alts while stopping the table from growing forever.

Oh wow, I didn't realize I never added this. I guess I am overdue for a new version as I have some fixes ready. Yeah, I will add this.

 

[Joe Link]

Oh wow, I didn't realize I never added this. I guess I am overdue for a new version as I have some fixes ready. Yeah, I will add this.

If it's not too difficult, it would be nice if @ tags/mentions worked in user notes

 

[AndrewSimm]

Oh wow, I didn't realize I never added this. I guess I am overdue for a new version as I have some fixes ready. Yeah, I will add this.

Testing this and a few other fixes on my prod site now

 

[MaximilianKohler]

Andrew, what do you think about an option to make a "modmail" like Reddit, so that moderator actions & discussions are available to all mods/admins? I'm thinking especially about Xenforo's warning system, which has an option to create a new private conversation with the user. If all mods/admins had default access to those, it would be much more convenient. Because as is, Xenforo isn't designed well for forums with multiple mods/admins since all discussions take place with individual mods/admins only.

I suggested it in @Xon's Warning Improvements addon, but didn't get a response. https://xenforo.com/community/threads/warning-improvements-by-xon.143831/post-1672241

It seems like it should be pretty simple to implement.

 

[Digital Doctor]

Because as is, Xenforo isn't designed well for forums with multiple mods/admins since all discussions take place with individual mods/admins only.

Modmail on reddit is alot better.
Many hands make light work.

 

[Xon]

I suggested it in @Xon's Warning Improvements addon, but didn't get a response. https://xenforo.com/community/threads/warning-improvements-by-xon.143831/post-1672241

That was just before a major XF2.3 update and I was sick shortly after; so I missed that.

Conversations are basically the wrong tool for working with warnings. It is hard to add new mods en-mass to them, and removing mods means you lose access, etc.

I wrote Warning Acknowledgements add-on to provide an easier way to give more information without using conversations, but this doesn't allow two-way conversations. Something like @Naz's Tickets add-on which can open a ticket for a user would work much saner.

 

[MaximilianKohler]

Hmm, it doesn't seem like https://xenforo.com/community/resources/warning-acknowledgement.6554/ solves the problem.

Conversations are basically the wrong tool for working with warnings

But that's the only option Xenforo gives us. I guess an alternative could be a specific subforum that's only viewable by mods/admins, and the warned users could get automatic access to the specific thread made about them. That may be even better than a modmail. But that would have to be a 3rd party addon too.

And that only solves the need for modmail regarding warnings. It doesn't solve it when a user wants to message the mod team. But maybe something similar could be implemented for that. Like a "message the mods/staff" button somewhere that creates a thread in the specified forum that has limited viewing permissions.

Something like @Naz's Tickets add-on which can open a ticket for a user would work much saner.

Yes, I saw this ticket addon and suggested it there: https://xenforo.com/community/threads/ac-support-tickets-paid.240170/.

For Naz's https://xenforo.com/community/resources/tickets-help-desk-and-knowledge-base.7442/, it's not clear to me whether it already integrates/replaces the PM in the warning system.

But wouldn't it be very simple to replace the Warning System's "create PM" with "create thread in selected subforum with X limits on viewing"? I just noticed/remembered that your Warning Improvements addon already has an option to create such a thread: Post warning summary to a new thread. But that existing option is too limited to be significantly useful. I have it enabled but don't use those threads at all. If there were an additional option to move the PM there, as described above, that might be the best solution.

 

[Solari]

Testing this and a few other fixes on my prod site now

Have you be

Oh wow, I didn't realize I never added this. I guess I am overdue for a new version as I have some fixes ready. Yeah, I will add this.

We have a huge board too and want to install this; any luck on a fix for this? Let us know how we can help and if we can make a donation to speed it along.

Thanks!
Ray

 

[fionix]

Hope you'll update the add on soon. I'm looking forward to some of the suggested features.