• [deleted]

Any plans for update this extensions for Flarum 0.1.0-beta.16 (RC1)?

I am aware that this is extension wih no active maintenance, but for me it is an essential extension because it provides basic intro for my forum without deeper insight into non-member posts.

Thanks anyway @clarkwinkelmann

23 days later
  • [deleted]

Any updates?

I'm only planning to update it in a batch of sponsored updates since it's on minimal support.

2 months later
4 months later

Versions 1.2.0 and 1.2.1

  • Added compatibility with Flarum 1.0+
  • Added option to hide first post
  • Try to hide attributes and relationships in more situations so other extensions don't accidentally expose unwanted posts though relationships
  • Hide tag meta together with "Hide last post user and date on discussion list" setting
  • Prevent first post being exposed through the search endpoint when first post is hidden

Update sponsored by FlarumTR

4 months later
  • [deleted]

Did any encounter a situation that.when this extension is enabled, non-admin users cannot see past first post (they are logged in)?

    [deleted] what's your configuration?

    What you describe is what this extension is intended to do, so I assume you are using a custom configuration? Did you only restrict a particular tag or user group? Or did you only restrict guests? Make sure to adjust the permission on the extension page. If you have tag-scoped permissions you might need to adjust it for multiple tags as well.

      • [deleted]

      • Edited

      clarkwinkelmann

      Flarum core 1.2.0
      PHP version: 7.4.27
      MySQL version: 5.5.5-10.3.32-MariaDB-0ubuntu0.20.04.1
      Loaded extensions: Core, date, libxml, openssl, pcre, zlib, bcmath, bz2, calendar, ctype, dom, enchant, hash, fileinfo, filter, ftp, gd, gettext, gmp, SPL, iconv, mbstring, pcntl, session, PDO, standard, posix, readline, Reflection, Phar, SimpleXML, soap, sockets, sodium, exif, sysvmsg, sysvsem, sysvshm, tokenizer, xml, xmlreader, xmlrpc, xmlwriter, xsl, zip, mysqlnd, timezonedb, igbinary, imagick, msgpack, memcached, json, curl, imap, intl, redis, ldap, mysqli, pdo_mysql, pdo_sqlite, pspell, sqlite3, tidy, Zend OPcache
      +------------------------------------------+---------+--------+
      | Flarum Extensions | | |
      +------------------------------------------+---------+--------+
      | ID | Version | Commit |
      +------------------------------------------+---------+--------+
      | flarum-suspend | v1.2.0 | |
      | flarum-subscriptions | v1.2.0 | |
      | flarum-tags | v1.2.0 | |
      | flarum-flags | v1.2.0 | |
      | fof-user-directory | 1.2.2 | |
      | fof-follow-tags | 1.1.0 | |
      | fof-spamblock | 1.0.2 | |
      | fof-oauth | 1.2.0 | |
      | flarum-approval | v1.2.0 | |
      | flarum-markdown | v1.2.0 | |
      | v17development-seo | v1.8.0 | |
      | the-turk-regrole | 1.0.3 | |
      | the-turk-diff | 1.1.1 | |
      | justoverclock-country-flags | 0.1.7 | |
      | itnt-uitab | v0.4.2 | |
      | ianm-synopsis | 1.2.0 | |
      | ianm-syndication | 1.1.0 | |
      | ianm-follow-users | 1.0.4 | |
      | fof-username-request | 1.0.1 | |
      | fof-user-bio | 1.0.1 | |
      | fof-upload | 1.1.0 | |
      | fof-terms | 1.1.2 | |
      | fof-subscribed | 1.0.2 | |
      | fof-stopforumspam | 1.1.1 | |
      | fof-split | 1.0.1 | |
      | fof-sitemap | 1.0.3 | |
      | fof-share-social | 1.0.1 | |
      | fof-secure-https | 1.0.1 | |
      | fof-recaptcha | 1.0.0 | |
      | fof-profile-image-crop | 1.0.1 | |
      | fof-polls | 1.0.5 | |
      | fof-nightmode | 1.2.0 | |
      | fof-moderator-notes | 1.0.1 | |
      | fof-merge-discussions | 1.2.0 | |
      | fof-links | 1.0.3 | |
      | fof-ignore-users | 1.0.2 | |
      | fof-gamification | 1.3.1 | |
      | fof-frontpage | 1.0.1 | |
      | fof-formatting | 1.0.2 | |
      | fof-drafts | 1.0.3 | |
      | fof-disposable-emails | 1.0.0 | |
      | fof-discussion-thumbnail | 1.0.1 | |
      | fof-default-user-preferences | 1.0.0 | |
      | fof-byobu | 1.1.1 | |
      | fof-best-answer | 1.1.7 | |
      | fof-analytics | 1.0.0 | |
      | flarum-sticky | v1.2.0 | |
      | flarum-statistics | v1.2.0 | |
      | flarum-pusher | v1.2.0 | |
      | flarum-nicknames | v1.2.0 | |
      | flarum-mentions | v1.2.0 | |
      | flarum-lock | v1.2.0 | |
      | flarum-lang-english | v1.2.0 | |
      | flarum-emoji | v1.2.0 | |
      | flarum-bbcode | v1.2.0 | |
      | flarum-akismet | v1.2.0 | |
      | dem13n-discussion-cards | 0.3.8 | |
      | datlechin-scroll-buttons | v0.1.3 | |
      | clarkwinkelmann-shadow-ban | 1.1.0 | |
      | clarkwinkelmann-see-past-first-post | 1.2.1 | |
      | clarkwinkelmann-post-bookmarks | 1.0.0 | |
      | clarkwinkelmann-popular-discussion-badge | 1.0.0 | |
      | clarkwinkelmann-group-list | 1.0.0 | |
      | clarkwinkelmann-bookmarks | 1.0.0 | |
      | askvortsov-rich-text | v2.1.1 | |
      | askvortsov-pwa | v3.1.1 | |
      | askvortsov-moderator-warnings | v0.6.1 | |
      | askvortsov-categories | v3.0.4 | |
      | acpl-lscache | 0.4.1 | |
      +------------------------------------------+---------+--------+
      Base URL: mysite.com
      Installation path: /home/mysite.com/forum
      Queue driver: sync
      Mail driver: smtp
      Debug mode: off

      I use this extension to disable access to forum discussions past first post (unregistered users so can see only first post). I have a dummy account for testing purposes and when I log in to see replies to my disscussion, I cannot see anything except the first post (as an admin I can see all posts and replies).

      I extension permissions I have enabled than only registered members can see past first post.

      When I disable this extension, all posts and replies are visible to users.

      I do not use tag restricted access, so any registered and active member can access all posts and discussions.

      Thank you for your time and help.

        [deleted] I have confirmed the extension doesn't seem to be working correctly on Flarum 1.2. I don't have any clue why just yet, I don't see any Flarum change that could have caused it.

        When the tags extension is disabled, all posts remain visible no matter the permission in this extension, so I suspect there's something wrong with the automatic prefixing of permissions in the implicit query scopes by permission name.

        I will continue investigating.

          • [deleted]

          clarkwinkelmann I will continue investigating.

          Ok, thanks for the effort, I really do appreciate it and love this extension.

            Version 1.3.0

            • Fix compatibility with Flarum 1.2
            • Fix ability to use extension without flarum/tags
            • Smaller javascript file by using Webpack 5

            [deleted] this should fix the issue.

            Bizarrely the breaking change I identified was introduced back in Flarum 1.0 or possibly 1.1, so I have no idea why the extension was still working up to 1.1 included. Some other backward compatible code must have been changed. Anyway the fix should now be the proper implementation for Flarum 1.x.

              • [deleted]

              clarkwinkelmann this should fix the issue.

              Can confirm that now it works perfectly. Thank you! This was really quick fix. As I stated earlier, for me it is an essential extension because it provides basic intro for my forum without deeper insight into non-member posts, and it should be a core extension 😃

              9 months later
              • [deleted]

              • Edited

              I use this extension for a quite long time. I have noticed that, when accessing discussion (not logged in), naturally I cannot see "past first post". Then I try to log in, but nothing happens (just page/discussion) refresh. Cleariing cache sometimes helps, and after login I can access discussions with more than one post(s). I think it is related to this extension (I really don't know why). No error message appears (flarum log is empty also).

                [deleted] can you share your php flarum info output?

                The FoF Realtime Login extension is one likely to cause issues around login and content refresh, but apart from that I'm not aware of any other existing issue.

                  • [deleted]

                  clarkwinkelmann

                  Flarum core 1.6.2
                  PHP version: 8.0.25
                  MySQL version: 10.3.34-MariaDB-0ubuntu0.20.04.1
                  Loaded extensions: Core, date, libxml, openssl, pcre, zlib, filter, hash, json, pcntl, Reflection, SPL, session, standard, sodium, mysqlnd, PDO, xml, calendar, ctype, curl, dom, mbstring, FFI, fileinfo, ftp, gd, gettext, iconv, igbinary, imagick, imap, intl, exif, mysqli, pdo_mysql, Phar, posix, readline, redis, shmop, SimpleXML, sockets, sysvmsg, sysvsem, sysvshm, tokenizer, xmlreader, xmlwriter, xsl, yaml, zip, Zend OPcache
                  +------------------------------------------+-----------------+--------+
                  | Flarum Extensions | | |
                  +------------------------------------------+-----------------+--------+
                  | ID | Version | Commit |
                  +------------------------------------------+-----------------+--------+
                  | flarum-flags | v1.6.1 | |
                  | flarum-approval | v1.6.1 | |
                  | flarum-subscriptions | v1.6.1 | |
                  | flarum-tags | v1.6.1 | |
                  | flarum-suspend | v1.6.1 | |
                  | fof-formatting | 1.0.2 | |
                  | afrux-forum-widgets-core | v0.1.7 | |
                  | fof-follow-tags | 1.1.7 | |
                  | fof-spamblock | 1.1.0 | |
                  | fof-byobu | 1.1.7 | |
                  | flarumite-simple-discussion-views | 1.1.5 | |
                  | flarum-markdown | v1.6.1 | |
                  | v17development-seo | v1.8.0 | |
                  | the-turk-regrole | 1.0.3 | |
                  | the-turk-diff | 1.1.2 | |
                  | sycho-lite-youtube | v0.1.0 | |
                  | mensurkerla-flarumbs | v1.1.1 | |
                  | justoverclock-welcomebox | 1.3.7 | |
                  | itnt-uitab | v0.4.2 | |
                  | ianm-synopsis | 1.2.2 | |
                  | ianm-follow-users | 1.2.0 | |
                  | fof-user-bio | 1.1.1 | |
                  | fof-upload | 1.2.3 | |
                  | fof-terms | 1.2.0 | |
                  | fof-subscribed | 1.1.2 | |
                  | fof-stopforumspam | 1.2.3 | |
                  | fof-split | 1.1.0 | |
                  | fof-sitemap | 2.0.1 | |
                  | fof-share-social | 1.1.0 | |
                  | fof-secure-https | 1.1.0 | |
                  | fof-profile-image-crop | 1.1.0 | |
                  | fof-polls | 1.2.1 | |
                  | fof-oauth | 1.3.0 | |
                  | fof-nightmode | 1.5.1 | |
                  | fof-merge-discussions | 1.3.1 | |
                  | fof-links | 1.1.2 | |
                  | fof-ignore-users | 1.1.0 | |
                  | fof-gamification | 1.6.2 | |
                  | fof-frontpage | 1.1.0 | |
                  | fof-drafts | 1.1.2 | |
                  | fof-disposable-emails | 1.0.0 | |
                  | fof-discussion-thumbnail | 1.1.0 | |
                  | fof-discussion-language | 1.2.8 | |
                  | fof-cookie-consent | 1.1.1 | |
                  | fof-best-answer | 1.2.4 | |
                  | fof-analytics | 1.1.0 | |
                  | flarum-sticky | v1.6.1 | |
                  | flarum-pusher | v1.6.1 | |
                  | flarum-package-manager | v1.0.0-beta.1.1 | |
                  | flarum-nicknames | v1.6.1 | |
                  | flarum-mentions | v1.6.1 | |
                  | flarum-lock | v1.6.1 | |
                  | flarum-lang-english | v1.6.0 | |
                  | flarum-emoji | v1.6.1 | |
                  | flarum-bbcode | v1.6.0 | |
                  | flarum-akismet | v1.6.1 | |
                  | ecnu-im-sticky-sidenav | v1.1.0 | |
                  | datlechin-scroll-buttons | v1.1.0 | |
                  | datlechin-offline-indicator | v0.1.0 | |
                  | datlechin-link-preview | v1.0.1 | |
                  | datlechin-copy-links | v0.1.1 | |
                  | clarkwinkelmann-sudo-mode | 1.0.1 | |
                  | clarkwinkelmann-see-past-first-post | 1.3.0 | |
                  | clarkwinkelmann-post-bookmarks | 1.0.0 | |
                  | clarkwinkelmann-popular-discussion-badge | 1.1.0 | |
                  | blomstra-welcome-login | 0.1.0 | |
                  | blomstra-turnstile | 0.1.0 | |
                  | blomstra-spam-prevention | 1.3 | |
                  | blomstra-sort-order-toggle | 0.2.0 | |
                  | blomstra-mark-unread | 0.2.0 | |
                  | askvortsov-rich-text | v2.1.7 | |
                  | askvortsov-pwa | v3.1.3 | |
                  | askvortsov-categories | v3.0.6 | |
                  | acpl-lscache | 0.4.1 | |
                  +------------------------------------------+-----------------+--------+
                  Base URL: https://mysite.com
                  Installation path: /home/mysite.com/flarum
                  Queue driver: sync
                  Session driver: file
                  Mail driver: smtp
                  Debug mode: off

                    [deleted] have you tried without the ListeSpeed Cache extension? Based on the list it's the first thing I would check.

                    If we can't find any extension conflict we would have to find a way to reproduce the error on a new installation so I can troubleshoot it locally.

                      • [deleted]

                      clarkwinkelmann have you tried without the ListeSpeed Cache extension? Based on the list it's the first thing I would check.

                      I will try and test (without) it. Thanks for yout time and effort!

                      2 months later

                      Security vulnerability with older Flarum versions

                      If you are running Flarum version 1.6.2 or lower, users can work around the visibility restriction by subscribing to a discussion. They would then be able to receive an email for each new post even if they normally couldn't see it.

                      I have been aware of this security issue for 2 weeks but couldn't announce it or fix it in the extension as it would have made the zero day exploit in Flarum public. I discovered the issue through internal review and am not aware of it being exploited in the wild.

                      Now that the issue is fixed in Flarum, no change is required in this extension. Just make sure Flarum is up to date https://discuss.flarum.org/d/32248-v163-security-patch

                      You can check you are up to date by running

                      composer show flarum/core
                      composer show flarum/subscriptions

                      And verify both show versions : * v1.6.3

                      4 months later

                      It's a good extension. Thank you.

                      When the extension is enabled, the login button that appears under the 'Log in to see the replies' message does not work. Where can I check to solve this problem? My flarum version is 1.7.2.
                      'Hide comment count on discussion list', 'Hide last post user and date on discussion list', 'Hide first post as well' All of these settings have been turned off.
                      When the 'Hide first post as well' function is turned on, the login button works, but I only want to hide replies, not first posts, from guest users.