[XB] Advanced Forms: Surveys, Questionnaires & Multi-Page Form Builder

[XB] Advanced Forms: Surveys, Questionnaires & Multi-Page Form Builder [Paid] 2.4.2 Patch Level 4

No permission to buy ($35.00)
Overview Updates (12) Reviews (1) History Discussion
For those upgrading from an older version: I updated from Advanced Forms · 2.2.6 Release Candidate 3 (downloaded from Snogsite back then, latest version available there) to the actual 2.4.1 a couple of days ago and just recognized that through the update all my existing forms were secretly disabled and had to be manually re-enabled. So possibly worth checking after an update.
 
smallwheels said:
For those upgrading from an older version: I updated from Advanced Forms · 2.2.6 Release Candidate 3 (downloaded from Snogsite back then, latest version available there) to the actual 2.4.1 a couple of days ago and just recognized that through the update all my existing forms were secretly disabled and had to be manually re-enabled. So possibly worth checking after an update.
Click to expand...
I reported this before (here). As far as I know, the root cause was never clearly identified. And, it's never happened since... so worth noting as you wrote, people upgrading from versions around v2.2.4'ish(?) and up, may face this somewhere along the line.
 
Painbaker updated [XB] Advanced Forms: Surveys, Questionnaires & Multi-Page Form Builder with a new update entry:

2.4.2

✨ Improvements​

  • Allow forms to restrict public aggregate statistics to users who submitted a response, optionally combined with selected user groups, with immediate access after a guest registers and claims their response
  • Allow optional Linear Scale answers to be cleared by clicking the selected choice again
  • Allow numeric questions to display an optional prefix or suffix on statistics values
  • Added per-question response...
Click to expand...

Read the rest of this update entry...
 
Painbaker updated [XB] Advanced Forms: Surveys, Questionnaires & Multi-Page Form Builder with a new update entry:

2.4.2 Patch Level 4

Improvements​

  • Added an option to include/exclude admin-only answers in email reports
  • Allow numeric questions to show thousands separators while typing, for example 100,000, to help avoid mistyped amounts

Bug Fixes​

  • Fixed a MySQL 8 error when saving or deleting questions caused by JSON functions on binary type_data values
  • Fixed the Post thread button...
Click to expand...

Read the rest of this update entry...
 
cdub said:
What php risk?
Click to expand...
Actually currently three threads on the "what's new" page on here about the topic plus social media is flooded...

ES Dev Team

Thread 'Heads up - critical PHP patch needed tomorrow for all servers'

Be prepared to update your PHP tomorrow as there'll be a patch for a 10.0 level CVE tomorrow. PHP.net is not releasing details until then.

php.net is intermittently not responding so here is a screenshot of their latest message.

1792560985405.webp

Proof of concept attack:
https://jackalsyn.com/posts/php-up-2026.html
I contacted the authors of this PoC on X and they tell me it's purposefully crippled.
However the mitigation advice looks good

Here's how you'd apply those mitigations:

Code: 
Add 2 Apache site entry:
# CVE remediation
RewriteEngine On
RewriteCond %{HTTP:Content-Type}...
  • Like

jtb33

XF 2.3 Thread 'PHP Emergency Patches & XenForo Cloud Status (CVE-2026-109618 / CVE-2026-109619)'

arstechnica.com

PHP warns it plans to release 2 emergency patches imminently

Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
arstechnica.com arstechnica.com

Hi XenForo Team and Community,

With the recent news regarding the upcoming critical emergency patches for PHP (CVE-2026-109618 and CVE-2026-109619) dropping imminently, I wanted to check in regarding the status for those of us who are XenForo Cloud customers.

Since the vulnerabilities are rated 9.2/10 and mass exploits are expected quickly following the 14:00 UTC release window, could the team clarify the patching window and deployment plan for the Cloud...
  • Like

Naz

Thread 'PSA: Critical PHP vulnerabilities'

The PHP security team would like to give advance notice of an upcoming security release.

It is scheduled for Wednesday, 21 October 2026 at 14:00 UTC.

It addresses two critical vulnerabilities, both rated CVSS v4.0 9.2.

All PHP users are encouraged to prepare now so they can upgrade as soon as the release is available.

We reserve the right to release earlier should details of either vulnerability become public, or should evidence of active exploitation appear in the wild.

Full details, affected versions, and the fixed...
Click to expand...
  • Like

As usual, people are so eager to post something "new" that they don't bother to check if what they want to post is indeed new...

Original source:

www.php.net

PHP: News Archive - 2026

PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.
www.php.net www.php.net
 
You must log in or register to reply here.
Back
Top Bottom