lets go! looking forward to whats coming
Staff Diary: v1.7 Cycle
We just released a security patch v1.6.2
please update your instances. Instructions in: https://discuss.flarum.org/d/31999-critical-security-update-to-flarum-core-v162
- Edited
Hey everyone,
I'd like to point out that PHP 7.4 will no longer receive any patches to fix security vulnerabilities. So, if you're still running 7.4 on your hosting environments, make sure to upgrade to at least PHP 8.0 as soon as possible!
Yes, this is important, servers running on vulnerable PHP versions can be hacked, websites defaced and information stolen.
Are there any steps required to upgrade Flarum you ask? Well, the process is fairly simple:
- Upgrade the PHP version of your commandline/cli, make sure it is the version you intend to run the website as. Use
php -v
to confirm, some hosting environments have PHP binaries for each version, for instance:php80 -v
andphp81 -v
. - Upgrade the PHP version the website runs as, most webhosting control panels (nowadays) allow you to configure the PHP version for each website independently. If not you'll need to make sure all other websites you host are PHP 8 compatible.
- Run the following command in the Flarum document root (where the files
flarum
andcomposer.json
live):composer update --prefer-dist --no-dev -a
or in case you need to use a different php binary:php81 composer update --prefer-dist --no-dev -a
. You should notice some changes in packages being installed. - Open your Flarum site and everything should be AOK.
In case you see any deprecated warnings, make sure the php.ini
for the PHP version you installed uses the recommended error_reporting
value for production:
; error_reporting
; Default Value: E_ALL
; Development Value: E_ALL
; Production Value: E_ALL & ~E_DEPRECATED & ~E_STRICT
error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT
Seems that i have to update Ubuntu server also, i hate to update and rebuild all the server config process again
- Edited
Zeokat You can install new PHP from this PPA: https://launchpad.net/~ondrej/+archive/ubuntu/php
There is no need t upgrade the whole server (unless it is really like 6-years old and your distribution is not supported anymore).
BTW: Ubuntu backports some critical security bugfixes to PHP in their repository, so using it should be quite safe, even if it is still PHP 7.4.
rob006 Personally I use that PPA on any Debian/Ubuntu server I use, regardless of how new the OS is. I find that the packages are just better maintained and more up to date. Not to mention as a dev having access to the latest in greatest immediately is sometimes important for testing.
- Edited
Today we welcome our newest trainee to the team @OrdinaryJellyfish! Although having been around for quite a while and showing an interest in programming, we've only now been able to extend an invitation to him to dive into the inner workings of Flarum while receiving hands-on and peer-to-peer coaching from our own core team for the duration of two development cycles.
The Flarum traineeship offers developers a way to level up their skills, while getting better at working with the Flarum source code. Although traineeships are usually only extended by recommendations from the own team, we are open to other trainees for future releases should you have an interest. If so, feel free to use the contact form on our website or hit me up on Discord directly for some further information.
Best of luck with the traineeship @OrdinaryJellyfish, you are in good hands!
welcome aboard @OrdinaryJellyfish , i've learned so much from the flarum team, so you're in really good hand
luceos Thank you for the terminal codes, worked like a charm. High-five!
PHP version updated to v8.0. Appreciate all the support from the community & the dev team.
amazing wowowowoowowowowow best ui forum
It's been a while since I've written an update on development, so here we go!
I've been working on a couple of PRs (only very recently) to add extra functionality to the Users List on the admin dashboard.
Coming in 1.7, we have:
- display name column
- better pagination (first/last page buttons, text box to go direct to a page, permalinks to pages)
- user creation (not merged yet)
@OrdinaryJellyfish also worked on implementing user searching for 1.7, too, and it works brilliantly!
I've also decided to pull my finger out and get my huge JS clean-up PR ready for review and merging ahead of 1.7. I left this sitting dormant as a draft for too long, and it needed to be merged or closed at this point.
This PR makes our JS more consistent, avoiding the use of ternaries for conditional rendering (condition ? <Component /> : ''
) preferring a simple &&
condition instead. It also removed uses of the older-style .component()
calls to render components, preferring the more modern and cleaner (imo) JSX syntax.
I've also replaced uses of the class
attribute with className
instead. Originally, I was pushing for the use of class
, but className
is what's used in every other JSX library, and we should realistically stick with using one and not a mix of both.
We have started the QA phase in preparation for the 1.7 release, it usually takes 1 to 2 weeks, you can help testing too through nightly: https://nightly.flarum.site/.
Won't more PR be included in this release? I can see some pending merges in the repository with this milestone but I don't know if they will be considered or moved to the next one.
It's just curiosity, for my part there are already many advances that I'm looking forward to including in my forum when everything is fully tested.
In preparation of the release of v1.7.0 discuss.flarum.org just got updated to this release. If you encounter any issues, feel free to report them here.
SychO I have been testing https://nightly.flarum.site/ and I found an issue trying to Like a publication:
https://nightly.flarum.site/d/41-ea-dolore-porro/2346
Post Request, Status: 500 Internal Server Error