See past first post

[deleted]

Any plans for update this extensions for Flarum 0.1.0-beta.16 (RC1)?

I am aware that this is extension wih no active maintenance, but for me it is an essential extension because it provides basic intro for my forum without deeper insight into non-member posts.

Thanks anyway @clarkwinkelmann

[deleted]

Any updates?

clarkwinkelmann

I'm only planning to update it in a batch of sponsored updates since it's on minimal support.

clarkwinkelmann

Versions 1.2.0 and 1.2.1

Added compatibility with Flarum 1.0+
Added option to hide first post
Try to hide attributes and relationships in more situations so other extensions don't accidentally expose unwanted posts though relationships
Hide tag meta together with "Hide last post user and date on discussion list" setting
Prevent first post being exposed through the search endpoint when first post is hidden

Update sponsored by FlarumTR

[deleted]

Did any encounter a situation that.when this extension is enabled, non-admin users cannot see past first post (they are logged in)?

clarkwinkelmann

[deleted] what's your configuration?

What you describe is what this extension is intended to do, so I assume you are using a custom configuration? Did you only restrict a particular tag or user group? Or did you only restrict guests? Make sure to adjust the permission on the extension page. If you have tag-scoped permissions you might need to adjust it for multiple tags as well.

[deleted]

clarkwinkelmann

Flarum core 1.2.0
PHP version: 7.4.27
MySQL version: 5.5.5-10.3.32-MariaDB-0ubuntu0.20.04.1
Loaded extensions: Core, date, libxml, openssl, pcre, zlib, bcmath, bz2, calendar, ctype, dom, enchant, hash, fileinfo, filter, ftp, gd, gettext, gmp, SPL, iconv, mbstring, pcntl, session, PDO, standard, posix, readline, Reflection, Phar, SimpleXML, soap, sockets, sodium, exif, sysvmsg, sysvsem, sysvshm, tokenizer, xml, xmlreader, xmlrpc, xmlwriter, xsl, zip, mysqlnd, timezonedb, igbinary, imagick, msgpack, memcached, json, curl, imap, intl, redis, ldap, mysqli, pdo_mysql, pdo_sqlite, pspell, sqlite3, tidy, Zend OPcache
+------------------------------------------+---------+--------+
| Flarum Extensions | | |
+------------------------------------------+---------+--------+
| ID | Version | Commit |
+------------------------------------------+---------+--------+
| flarum-suspend | v1.2.0 | |
| flarum-subscriptions | v1.2.0 | |
| flarum-tags | v1.2.0 | |
| flarum-flags | v1.2.0 | |
| fof-user-directory | 1.2.2 | |
| fof-follow-tags | 1.1.0 | |
| fof-spamblock | 1.0.2 | |
| fof-oauth | 1.2.0 | |
| flarum-approval | v1.2.0 | |
| flarum-markdown | v1.2.0 | |
| v17development-seo | v1.8.0 | |
| the-turk-regrole | 1.0.3 | |
| the-turk-diff | 1.1.1 | |
| justoverclock-country-flags | 0.1.7 | |
| itnt-uitab | v0.4.2 | |
| ianm-synopsis | 1.2.0 | |
| ianm-syndication | 1.1.0 | |
| ianm-follow-users | 1.0.4 | |
| fof-username-request | 1.0.1 | |
| fof-user-bio | 1.0.1 | |
| fof-upload | 1.1.0 | |
| fof-terms | 1.1.2 | |
| fof-subscribed | 1.0.2 | |
| fof-stopforumspam | 1.1.1 | |
| fof-split | 1.0.1 | |
| fof-sitemap | 1.0.3 | |
| fof-share-social | 1.0.1 | |
| fof-secure-https | 1.0.1 | |
| fof-recaptcha | 1.0.0 | |
| fof-profile-image-crop | 1.0.1 | |
| fof-polls | 1.0.5 | |
| fof-nightmode | 1.2.0 | |
| fof-moderator-notes | 1.0.1 | |
| fof-merge-discussions | 1.2.0 | |
| fof-links | 1.0.3 | |
| fof-ignore-users | 1.0.2 | |
| fof-gamification | 1.3.1 | |
| fof-frontpage | 1.0.1 | |
| fof-formatting | 1.0.2 | |
| fof-drafts | 1.0.3 | |
| fof-disposable-emails | 1.0.0 | |
| fof-discussion-thumbnail | 1.0.1 | |
| fof-default-user-preferences | 1.0.0 | |
| fof-byobu | 1.1.1 | |
| fof-best-answer | 1.1.7 | |
| fof-analytics | 1.0.0 | |
| flarum-sticky | v1.2.0 | |
| flarum-statistics | v1.2.0 | |
| flarum-pusher | v1.2.0 | |
| flarum-nicknames | v1.2.0 | |
| flarum-mentions | v1.2.0 | |
| flarum-lock | v1.2.0 | |
| flarum-lang-english | v1.2.0 | |
| flarum-emoji | v1.2.0 | |
| flarum-bbcode | v1.2.0 | |
| flarum-akismet | v1.2.0 | |
| dem13n-discussion-cards | 0.3.8 | |
| datlechin-scroll-buttons | v0.1.3 | |
| clarkwinkelmann-shadow-ban | 1.1.0 | |
| clarkwinkelmann-see-past-first-post | 1.2.1 | |
| clarkwinkelmann-post-bookmarks | 1.0.0 | |
| clarkwinkelmann-popular-discussion-badge | 1.0.0 | |
| clarkwinkelmann-group-list | 1.0.0 | |
| clarkwinkelmann-bookmarks | 1.0.0 | |
| askvortsov-rich-text | v2.1.1 | |
| askvortsov-pwa | v3.1.1 | |
| askvortsov-moderator-warnings | v0.6.1 | |
| askvortsov-categories | v3.0.4 | |
| acpl-lscache | 0.4.1 | |
+------------------------------------------+---------+--------+
Base URL: mysite.com
Installation path: /home/mysite.com/forum
Queue driver: sync
Mail driver: smtp
Debug mode: off

I use this extension to disable access to forum discussions past first post (unregistered users so can see only first post). I have a dummy account for testing purposes and when I log in to see replies to my disscussion, I cannot see anything except the first post (as an admin I can see all posts and replies).

I extension permissions I have enabled than only registered members can see past first post.

When I disable this extension, all posts and replies are visible to users.

I do not use tag restricted access, so any registered and active member can access all posts and discussions.

Thank you for your time and help.

clarkwinkelmann

[deleted] I have confirmed the extension doesn't seem to be working correctly on Flarum 1.2. I don't have any clue why just yet, I don't see any Flarum change that could have caused it.

When the tags extension is disabled, all posts remain visible no matter the permission in this extension, so I suspect there's something wrong with the automatic prefixing of permissions in the implicit query scopes by permission name.

I will continue investigating.

[deleted]

clarkwinkelmann I will continue investigating.

Ok, thanks for the effort, I really do appreciate it and love this extension.

clarkwinkelmann

Version 1.3.0

Fix compatibility with Flarum 1.2
Fix ability to use extension without flarum/tags
Smaller javascript file by using Webpack 5

[deleted] this should fix the issue.

Bizarrely the breaking change I identified was introduced back in Flarum 1.0 or possibly 1.1, so I have no idea why the extension was still working up to 1.1 included. Some other backward compatible code must have been changed. Anyway the fix should now be the proper implementation for Flarum 1.x.

[deleted]

clarkwinkelmann this should fix the issue.

Can confirm that now it works perfectly. Thank you! This was really quick fix. As I stated earlier, for me it is an essential extension because it provides basic intro for my forum without deeper insight into non-member posts, and it should be a core extension 😃

[deleted]

I use this extension for a quite long time. I have noticed that, when accessing discussion (not logged in), naturally I cannot see "past first post". Then I try to log in, but nothing happens (just page/discussion) refresh. Cleariing cache sometimes helps, and after login I can access discussions with more than one post(s). I think it is related to this extension (I really don't know why). No error message appears (flarum log is empty also).

clarkwinkelmann

[deleted] can you share your php flarum info output?

The FoF Realtime Login extension is one likely to cause issues around login and content refresh, but apart from that I'm not aware of any other existing issue.

[deleted]

clarkwinkelmann

Flarum core 1.6.2
PHP version: 8.0.25
MySQL version: 10.3.34-MariaDB-0ubuntu0.20.04.1
Loaded extensions: Core, date, libxml, openssl, pcre, zlib, filter, hash, json, pcntl, Reflection, SPL, session, standard, sodium, mysqlnd, PDO, xml, calendar, ctype, curl, dom, mbstring, FFI, fileinfo, ftp, gd, gettext, iconv, igbinary, imagick, imap, intl, exif, mysqli, pdo_mysql, Phar, posix, readline, redis, shmop, SimpleXML, sockets, sysvmsg, sysvsem, sysvshm, tokenizer, xmlreader, xmlwriter, xsl, yaml, zip, Zend OPcache
+------------------------------------------+-----------------+--------+
| Flarum Extensions | | |
+------------------------------------------+-----------------+--------+
| ID | Version | Commit |
+------------------------------------------+-----------------+--------+
| flarum-flags | v1.6.1 | |
| flarum-approval | v1.6.1 | |
| flarum-subscriptions | v1.6.1 | |
| flarum-tags | v1.6.1 | |
| flarum-suspend | v1.6.1 | |
| fof-formatting | 1.0.2 | |
| afrux-forum-widgets-core | v0.1.7 | |
| fof-follow-tags | 1.1.7 | |
| fof-spamblock | 1.1.0 | |
| fof-byobu | 1.1.7 | |
| flarumite-simple-discussion-views | 1.1.5 | |
| flarum-markdown | v1.6.1 | |
| v17development-seo | v1.8.0 | |
| the-turk-regrole | 1.0.3 | |
| the-turk-diff | 1.1.2 | |
| sycho-lite-youtube | v0.1.0 | |
| mensurkerla-flarumbs | v1.1.1 | |
| justoverclock-welcomebox | 1.3.7 | |
| itnt-uitab | v0.4.2 | |
| ianm-synopsis | 1.2.2 | |
| ianm-follow-users | 1.2.0 | |
| fof-user-bio | 1.1.1 | |
| fof-upload | 1.2.3 | |
| fof-terms | 1.2.0 | |
| fof-subscribed | 1.1.2 | |
| fof-stopforumspam | 1.2.3 | |
| fof-split | 1.1.0 | |
| fof-sitemap | 2.0.1 | |
| fof-share-social | 1.1.0 | |
| fof-secure-https | 1.1.0 | |
| fof-profile-image-crop | 1.1.0 | |
| fof-polls | 1.2.1 | |
| fof-oauth | 1.3.0 | |
| fof-nightmode | 1.5.1 | |
| fof-merge-discussions | 1.3.1 | |
| fof-links | 1.1.2 | |
| fof-ignore-users | 1.1.0 | |
| fof-gamification | 1.6.2 | |
| fof-frontpage | 1.1.0 | |
| fof-drafts | 1.1.2 | |
| fof-disposable-emails | 1.0.0 | |
| fof-discussion-thumbnail | 1.1.0 | |
| fof-discussion-language | 1.2.8 | |
| fof-cookie-consent | 1.1.1 | |
| fof-best-answer | 1.2.4 | |
| fof-analytics | 1.1.0 | |
| flarum-sticky | v1.6.1 | |
| flarum-pusher | v1.6.1 | |
| flarum-package-manager | v1.0.0-beta.1.1 | |
| flarum-nicknames | v1.6.1 | |
| flarum-mentions | v1.6.1 | |
| flarum-lock | v1.6.1 | |
| flarum-lang-english | v1.6.0 | |
| flarum-emoji | v1.6.1 | |
| flarum-bbcode | v1.6.0 | |
| flarum-akismet | v1.6.1 | |
| ecnu-im-sticky-sidenav | v1.1.0 | |
| datlechin-scroll-buttons | v1.1.0 | |
| datlechin-offline-indicator | v0.1.0 | |
| datlechin-link-preview | v1.0.1 | |
| datlechin-copy-links | v0.1.1 | |
| clarkwinkelmann-sudo-mode | 1.0.1 | |
| clarkwinkelmann-see-past-first-post | 1.3.0 | |
| clarkwinkelmann-post-bookmarks | 1.0.0 | |
| clarkwinkelmann-popular-discussion-badge | 1.1.0 | |
| blomstra-welcome-login | 0.1.0 | |
| blomstra-turnstile | 0.1.0 | |
| blomstra-spam-prevention | 1.3 | |
| blomstra-sort-order-toggle | 0.2.0 | |
| blomstra-mark-unread | 0.2.0 | |
| askvortsov-rich-text | v2.1.7 | |
| askvortsov-pwa | v3.1.3 | |
| askvortsov-categories | v3.0.6 | |
| acpl-lscache | 0.4.1 | |
+------------------------------------------+-----------------+--------+
Base URL: https://mysite.com
Installation path: /home/mysite.com/flarum
Queue driver: sync
Session driver: file
Mail driver: smtp
Debug mode: off

clarkwinkelmann

[deleted] have you tried without the ListeSpeed Cache extension? Based on the list it's the first thing I would check.

If we can't find any extension conflict we would have to find a way to reproduce the error on a new installation so I can troubleshoot it locally.

[deleted]

clarkwinkelmann have you tried without the ListeSpeed Cache extension? Based on the list it's the first thing I would check.

I will try and test (without) it. Thanks for yout time and effort!

clarkwinkelmann

Security vulnerability with older Flarum versions

If you are running Flarum version 1.6.2 or lower, users can work around the visibility restriction by subscribing to a discussion. They would then be able to receive an email for each new post even if they normally couldn't see it.

I have been aware of this security issue for 2 weeks but couldn't announce it or fix it in the extension as it would have made the zero day exploit in Flarum public. I discovered the issue through internal review and am not aware of it being exploited in the wild.

Now that the issue is fixed in Flarum, no change is required in this extension. Just make sure Flarum is up to date https://discuss.flarum.org/d/32248-v163-security-patch

You can check you are up to date by running

composer show flarum/core
composer show flarum/subscriptions

And verify both show versions : * v1.6.3

arrstein4u

It's a good extension. Thank you.

When the extension is enabled, the login button that appears under the 'Log in to see the replies' message does not work. Where can I check to solve this problem? My flarum version is 1.7.2.
'Hide comment count on discussion list', 'Hide last post user and date on discussion list', 'Hide first post as well' All of these settings have been turned off.
When the 'Hide first post as well' function is turned on, the login button works, but I only want to hide replies, not first posts, from guest users.

clarkwinkelmann

arrstein4u please post the output of your php flarum info and describe what you mean by "does not work". Does an error message appear, do you see some broken UI appear or is there nothing visibly happening on click? In general but especially if nothing is happening at all, check the javascript console under the browser development tools for any javascript error message that might appear when you click the button.

« Previous Page Next Page »