Flarum 1.1.0 Released

Kylo

jslirola There's a PR for that flarum/core2961, tagged for the 1.2 milestone

TheBlapse

Just upgraded, Thank you Flarum 🙂 ❤️

jonas009

Hello, thank you for this update, this update is very good, it brings a lot to the site at last some good update, it was really needed, thank you and I am asking for more, such as this update

Sapioit

Still no archive available, so we can install it without SSH? I sometimes think you intentionally don't want Flarum to become too popular. Even though it would allow more people to start sending Pull Requests.

pupsik

Sapioit I dont think they do it on purpose. Its probably allot of work and time to make it web based friendly. But, I agree, web based friendly would bring a ton of users.

matteocontrini

Sapioit it's not just about installing it, Flarum uses Composer for managing dependencies, including extensions. Getting rid of Composer would mean writing a dependencies management system from scratch, it would take a lot of effort and time and IMO without much benefit. Modern PHP applications should make use of modern tools.

Sapioit

matteocontrini it's not just about installing it, Flarum uses Composer for managing dependencies, including extensions. Getting rid of Composer would mean writing a dependencies management system from scratch, it would take a lot of effort and time and IMO without much benefit. Modern PHP applications should make use of modern tools.

I get your point, but maybe there are modern php dependency management systems which can be used instead of composer. Or maybe someone already wants to make one, but doesn't think enough people want or need it, and word-of-mouth goes far.

Umutcan Sometimes it is a good feeling that the number of people who use a flarum is low and that only I use this structure in my field. For this reason, I am against facilitating the steps that will make it easier for everyone to use the flarum like wordpress.

I see, so the goal is for Flarum to not become as popular, because that would make it a better product, and some people don't want the product to become better, if it means more people use it and know of it.

Umutcan

Sometimes it is a good feeling that the number of people who use a flarum is low and that only I use this structure in my field. For this reason, I am against facilitating the steps that will make it easier for everyone to use the flarum like wordpress.

Braden

Umutcan I slightly agree with you, but how about the owners? The purpose of a good script like this one is to generate money, unless we all come up with something like securing.. like buying the TOTAL and lock the installation, like saying enough is enough

Flarum 1.1.0 release adding my suggestion
When you enter a topic on first page (of its original post) and click edit

It auto scrolls the comment section automatic, i don't know if anyone else has noticed that behavior?
For some people who are using ads , google might detect this as bot? Imagine, when huge traffic caught at the same session

-Just thinking-
Similar discussed: https://discuss.flarum.org/d/21894-friendsofflarum-best-answer/207

EDIT: sorry for expanding this explanation:-

If Flarum becomes popular, most of us who are using shared hosting would be forced to use cloudflare or other sort of server protections. I myself i have started to receive more than 250 blocked threats everyday, in just one month now, google had to report it to me, like "hey, its your job to ensure you protect the advertisers / advertisements because they are paying" .. Security is one thing everyone should take it seriously!

Most of these threats are auto generated bots which come looking for url paths like wp-login , wp-include , which smells like they are looking to find a wordpress script internal files, so i can say at the moment we are at least safe because Flarum script is not shared or installed by using zip's archives?

We are also very lucky flarum does not have login url and the adwares seem to not know yet the system structure files.

Reenactment
I had to put the site in ddos attack mode where it created a js kind of protection layer, which traced all visitors, and then block those who failed automatic or i was suspicious with.... If you try this, you will be surprised how your site is crawled by useless bots, even rankers. I keep saying each day, flarum is the best you can find, very fast, but bad bots eat up your server big!

Its the best has been the best because of how it has been playing out, ssh installs e.t.c 👍️

wonderbeel

Sapioit I get your point, but maybe there are modern php dependency management systems which can be used instead of composer. Or maybe someone already wants to make one, but doesn't think enough people want or need it, and word-of-mouth goes far.

Composer actually is the modern replacement for dependency management in the PHP world, before it there was only PEAR (or you just dropped your dependencies as a tarball and call it a day); newer forum software (discourse, nodebb and flarum) all use their respective language package manager (bundler, npm/yarn/pnpm, composer) to handle the dependencies because it is a way saner way to do it compared to the old way (that older forum software still use because they can't de facto drop it) both from a developer experience and security point of view.
Having said that I agree that it would be great to have a way to install extensions that is comfortable for less tech savvy admins but not in the form of "upload your plugin here", the best solution would be a resurgence of Bazaar (or a new extension that gives the same functionalities) but it is easier said than done obviously.

luceos

As for the discussion on composer. Before stable we talked extensively about this in the team. Not using composer to manage dependencies of extensions would be a huge pain. You can see this in the Wordpress world as well where developers of famous extensions like Yoast fallback on using composer as well, their struggle is real. Flarum will stick to composer, because from a security, stability and extensibility standpoint it's the only valid choice. Still, we are already making progress on simplifying some of the processes involving composer; we'll share more news when it makes sense to do so.

Sapioit I see, so the goal is for Flarum to not become as popular, because that would make it a better product, and some people don't want the product to become better, if it means more people use it and know of it.

We want to see Flarum become popular and we are working hard, tirelessly even, to make it better. But composer is a cornerstone for us for quality, security and stability that we cannot remove without risk.

Braden most of us who are using shared hosting would be forced to use cloudflare or other sort of server protections. I myself i have started to receive more than 250 blocked threats everyday, in just one month now, google had to report it to me, like "hey, its your job to ensure you protect the advertisers / advertisements because they are paying" .. Security is one thing everyone should take it seriously!

Google Adsense or similar advertising channels won't treat you negatively due to bot activity. The protection you speak of from CloudFlare protects you from potential attacks indeed. Without that protection those pages will return a 404 and thus won't hit any pages that would generate ads. As to crawling bots, I can assure you that Google will make sure to understand when bots are visiting, otherwise their own search indexer would cause tremendous pain on all those websites they keep bashing.

Sapioit

wonderbeel I see. I still think that ideally there should be a dependency manager which doesn't need any special permissions, except maybe setting the file's permissions to 777, which is easy-enough even for a non-techie, with the aid of tutorials. I mean, a file or small script which can deal with the management of dependencies, including opt-in (or opt-out) auto-update (because updating can break things, and you want to be able to make backups before updating), and which doesn't need console commands.

username0136

Who is admin of this forum?
I want to report a issue that whenever I come to this forum there are new replies right? So in the notification bell number of new replies is shown so what I was telling is sometimes the value is in negative like -1 if I already read notification from other tab or I open notification in new tab, So this issue happens in all flarum forums or here only?

matteocontrini

username0136 it's been reported a few times already: https://discuss.flarum.org/?q=negative%20notifications

It can happen on other forums as well.

username0136

sometimes it shows random number also like now only someone liked my post so it shown 7 but there was only one notification.

Braden

luceos

Braden that's quite some compilation 😉

Green_Grass_Guy

Fantastic!

cloud-arrow

😃 nice ，thank you luceos

fragicide

Most excellent!!! This is awesome news

« Previous Page Next Page »