Today, we are pleased to announce the release of XenForo 1.0.3, the third maintenance version of our forum software. This version contains primarily bug fixes and tweaks, but also includes a few nuggets of new functionality where appropriate. Details are below.
How Tedious are Script Kiddies?
It has come to our attention that various sites running XenForo are being targeted by script kiddies who are repeatedly visiting a page that results in an email being sent to a member, sometimes resulting in dozens of emails arriving in your inbox. This action can not result in secure information being leaked, or compromise the security of the system but it certainly is annoying if your inbox starts to fill up. To combat this, we have added two systems that should put a stop to the tedious antics.
More Stable
This release of XenForo 1.0.3 follows our principle that third-point (x.x.X) releases should always be more stable than the preceding version, so for the most part you will not find new features in 1.0.3. Major new features will be reserved for second point versions (x.X.x).
Installation and Upgrade Instructions
Full details for how to install and upgrade XenForo can be found in the XenForo Manual.
File Health Check
Over the past few months of delivering technical support for XenForo, we have found that problems are very frequently due to customers not having completely uploaded all the files associated with a version, resulting in a mismatch of code.
With 1.0.3, we debut the File Health Check system, which allows you to run a check with just a few clicks to see if all the appropriate files are in place and contain the correct contents. If any problems are detected, you will be alerted to the error.
Of course, being XenForo, the File Health Check system provides a code event to allow add-on authors to add their own code into the health check so that they too can benefit from knowing that all their files have been successfully uploaded.
Google +1 (Plus One) Button
I'll let Google explain this one:
Thread View:
Forum List:
By default, XenForo ships with +1 disabled, as it has proven to be rather heavy on HTTP requests for such a simple button, but it's there if you want it. Just go to the SEO options section of the Admin Control Panel and enable it if you wish to do so.
ImageMagick Image Handler
If you have the PECL imagick extension available on your server, you may now opt to use it as the image manipulation library for XenForo.
This can have several advantages, the most important of which is the ability to maintain animation in GIF files when resizing.
To switch to use imagick, change the option in the Attachments section of the Admin Control Panel options.
Our thanks to Scott for providing XenForo_Image_ImageMagick_Pecl.
Permission to Report
There is a new user group permission, to allow you to control who can and cannot report content. This can be useful for removing the ability to report from those who habitually abuse the system, flooding the report manager.
Log Out Confirmation
The main log-out link at the far right of the navigation bar now prompts for confirmation before logging you out in order to prevent annoying accidental log outs. The log out link within the username menu does not prompt for confirmation, as it is much more difficult to hit unintentionally.
If you want to change the behavior of either of these links, copy the code from the other.
Templates Changed Since 1.0.2
The following templates have been modified since their release in XenForo 1.0.2.
General Template Changes
The following changes provide functional improvements and fixes or cosmetic enhancements. We recommend that all users integrate these changes into their own templates if they have previously customized them by using the 'revert' controls. If you have not customized these templates, the changes will be automatically integrated when you upgrade to 1.0.3:
lost_password
Added CAPTCHA
navigation_visitor_tab
Alterations to force the main log-out link to show a confirmation dialog
node_category_level_2
node_forum_level_2
node_link_level_2
node_link_level_n
node_page_level_2
node_page_level_n
Changes to hasNew handling (remove the check for !{$visitor.user_id})
PAGE_CONTAINER
Typo fix - update {$showBoardClosedNoticed} to {$showBoardClosedNotice}
poll_block_result
Add class 'overlayScroll' to the block in order to prevent overflows.
register_form
Fix typo in timezone code: {xenif $fields.timezoneAuto should read {xen:if $fields.timezoneAuto
share_page
sidebar_share_page
Add support for Google +1
thread_create
Show forum description when creating a new thread
xenforo_reset.css
Force Firefox to display broken images
attached_files
attachment_editor_attachment
bb_code_tag_attach
Removed redundant 'embedded' parameter from attachment links
form.css
Added a little extra space above hints in list items
help_bb_codes.css
Generally larger text
xenforo_overlay.css
Add a little more padding for text in form overlays
Template Hook-Only Changes
The following changes relate to template hooks only. If you do not run any add-ons, and you do not intend to do so, you may ignore the following changes:
conversation_message
post
profile_post
Fixed broken template hooks
help_wrapper
Add template hooks
Translation-Related Changes
If you are running an entirely English-based forum and your templates are not intended for use elsewhere, you may ignore the following changes:
facebook.css
Increased width
forum_mark_read
report_view
search_form
search_form_post
Changed phrases to avoid ambiguity in some non-English languages
Following what appears to be an undocumented change in the Google +1 API in the past few days, the XenForo implementation currently fails to operate correctly when clicked. We are aware of this problem, and are actively seeking a solution.
There is a bug report concerning the +1 issues that we will update as we have any further news:
Google +1 issues
The Google+ / +1 issue is now resolved, and the fix will be included in XenForo 1.0.4.
How Tedious are Script Kiddies?
It has come to our attention that various sites running XenForo are being targeted by script kiddies who are repeatedly visiting a page that results in an email being sent to a member, sometimes resulting in dozens of emails arriving in your inbox. This action can not result in secure information being leaked, or compromise the security of the system but it certainly is annoying if your inbox starts to fill up. To combat this, we have added two systems that should put a stop to the tedious antics.
More Stable
This release of XenForo 1.0.3 follows our principle that third-point (x.x.X) releases should always be more stable than the preceding version, so for the most part you will not find new features in 1.0.3. Major new features will be reserved for second point versions (x.X.x).
Installation and Upgrade Instructions
Full details for how to install and upgrade XenForo can be found in the XenForo Manual.
File Health Check
Over the past few months of delivering technical support for XenForo, we have found that problems are very frequently due to customers not having completely uploaded all the files associated with a version, resulting in a mismatch of code.
With 1.0.3, we debut the File Health Check system, which allows you to run a check with just a few clicks to see if all the appropriate files are in place and contain the correct contents. If any problems are detected, you will be alerted to the error.
Of course, being XenForo, the File Health Check system provides a code event to allow add-on authors to add their own code into the health check so that they too can benefit from knowing that all their files have been successfully uploaded.
Google +1 (Plus One) Button
I'll let Google explain this one:
XenForo 1.0.3 now allows you to include Google +1 buttons in the same places as the existing Facebook Like and Tweet buttons.Google said:
Thread View:
Forum List:
By default, XenForo ships with +1 disabled, as it has proven to be rather heavy on HTTP requests for such a simple button, but it's there if you want it. Just go to the SEO options section of the Admin Control Panel and enable it if you wish to do so.
ImageMagick Image Handler
If you have the PECL imagick extension available on your server, you may now opt to use it as the image manipulation library for XenForo.
This can have several advantages, the most important of which is the ability to maintain animation in GIF files when resizing.
To switch to use imagick, change the option in the Attachments section of the Admin Control Panel options.
Our thanks to Scott for providing XenForo_Image_ImageMagick_Pecl.
Permission to Report
There is a new user group permission, to allow you to control who can and cannot report content. This can be useful for removing the ability to report from those who habitually abuse the system, flooding the report manager.
Log Out Confirmation
The main log-out link at the far right of the navigation bar now prompts for confirmation before logging you out in order to prevent annoying accidental log outs. The log out link within the username menu does not prompt for confirmation, as it is much more difficult to hit unintentionally.
If you want to change the behavior of either of these links, copy the code from the other.
Templates Changed Since 1.0.2
The following templates have been modified since their release in XenForo 1.0.2.
General Template Changes
The following changes provide functional improvements and fixes or cosmetic enhancements. We recommend that all users integrate these changes into their own templates if they have previously customized them by using the 'revert' controls. If you have not customized these templates, the changes will be automatically integrated when you upgrade to 1.0.3:
lost_password
Added CAPTCHA
navigation_visitor_tab
Alterations to force the main log-out link to show a confirmation dialog
node_category_level_2
node_forum_level_2
node_link_level_2
node_link_level_n
node_page_level_2
node_page_level_n
Changes to hasNew handling (remove the check for !{$visitor.user_id})
PAGE_CONTAINER
Typo fix - update {$showBoardClosedNoticed} to {$showBoardClosedNotice}
poll_block_result
Add class 'overlayScroll' to the block in order to prevent overflows.
register_form
Fix typo in timezone code: {xenif $fields.timezoneAuto should read {xen:if $fields.timezoneAuto
share_page
sidebar_share_page
Add support for Google +1
thread_create
Show forum description when creating a new thread
xenforo_reset.css
Force Firefox to display broken images
attached_files
attachment_editor_attachment
bb_code_tag_attach
Removed redundant 'embedded' parameter from attachment links
form.css
Added a little extra space above hints in list items
help_bb_codes.css
Generally larger text
xenforo_overlay.css
Add a little more padding for text in form overlays
Template Hook-Only Changes
The following changes relate to template hooks only. If you do not run any add-ons, and you do not intend to do so, you may ignore the following changes:
conversation_message
post
profile_post
Fixed broken template hooks
help_wrapper
Add template hooks
Translation-Related Changes
If you are running an entirely English-based forum and your templates are not intended for use elsewhere, you may ignore the following changes:
facebook.css
Increased width
forum_mark_read
report_view
search_form
search_form_post
Changed phrases to avoid ambiguity in some non-English languages
If you want to generate hashes for your add-on, you need to run hashDirectory() from XenForo_Helper_Hash, provided with XenForo 1.0.3. The function is fairly self-explanatory.XenForo said:
Following what appears to be an undocumented change in the Google +1 API in the past few days, the XenForo implementation currently fails to operate correctly when clicked. We are aware of this problem, and are actively seeking a solution.
There is a bug report concerning the +1 issues that we will update as we have any further news:
Google +1 issues
The Google+ / +1 issue is now resolved, and the fix will be included in XenForo 1.0.4.
