vbresults
Well-known member
This is might be an unpopular view, but I develop for both of these platforms, and all of the snark aside, though they both sell forum software, the primary customers of these two companies are completely different.
As XenForo was founded by developers, it's natural that they pay a lot of attention to code. This was severely lacking in vBulletin, and everyone from that era knows a vBulletin board that has been hacked because of that.
I cannot recall one XF 1 or 2 client being hacked ever due to the core in almost a decade and a half. On the contrary, an SQL injection vulnerability sitting in the IPS code for 5 years was only found and fixed this March.
For that reason, it's weird for them to criticize XF over their focus on code. That vulnerability was a huge deal; a hacked IPS client contacted me recently. But, if you look at the patch, IPS wrote the note below in an intentionally vague way.

OTOH, IPS is more enterprise focused and closure of their plugin marketplace hasn't hurt them. Obviously, XF has a gallery, but I read all of the docs and it's objectively true that the default IPS feature set is miles ahead of XF's.
With XF introducing a cloud service and IPS modernizing their code in 5.x, the two are converging more than people would like to believe. This convergence might be moving XF and IPS into direct competition.
If IPS has the feature set in 5.x that they do in 4.x, IPS will objectively be ahead. It is mystifying to me that neither has yet taken up implementing a Reddit-like layout, but whoever moves first is going to have an edge.
As XenForo was founded by developers, it's natural that they pay a lot of attention to code. This was severely lacking in vBulletin, and everyone from that era knows a vBulletin board that has been hacked because of that.
I cannot recall one XF 1 or 2 client being hacked ever due to the core in almost a decade and a half. On the contrary, an SQL injection vulnerability sitting in the IPS code for 5 years was only found and fixed this March.
For that reason, it's weird for them to criticize XF over their focus on code. That vulnerability was a huge deal; a hacked IPS client contacted me recently. But, if you look at the patch, IPS wrote the note below in an intentionally vague way.
OTOH, IPS is more enterprise focused and closure of their plugin marketplace hasn't hurt them. Obviously, XF has a gallery, but I read all of the docs and it's objectively true that the default IPS feature set is miles ahead of XF's.
With XF introducing a cloud service and IPS modernizing their code in 5.x, the two are converging more than people would like to believe. This convergence might be moving XF and IPS into direct competition.
If IPS has the feature set in 5.x that they do in 4.x, IPS will objectively be ahead. It is mystifying to me that neither has yet taken up implementing a Reddit-like layout, but whoever moves first is going to have an edge.
Last edited: