Flarum v1.8.0 Released

Capp

i want to recomend something for the next update

luceos

Capp feel free to useProposals

MikeJones

I officially upgraded with no issues this morning! Thanks for all the hard work as always!

Capp

it is in there as my hide post flag thing

MikeJones

I called victory to early posting and saving drafts is not working... thinking its probbaly a simple permissions issue...

Link to issue: https://discuss.flarum.org/d/36483-upgraded-to-189-and-cant-post-or-save-drafts

Capybara

I'll just say that I joined the Flarum from version 1.8.5. And still have no problems updating to new versions. Enter the password from the database and voila — the forum has been updated 👀

CDLStudy

someone hacked this website demo page where is the admin

luceos

CDLStudy yeah I got multiple reports. It's not hacked mind you, but defaced. Which is very easy to do with the admin permissions we openly share. It seems we cannot trust the internet and will need to lock down the admin (further).

lhy

I just installed Flarum today, using version 8.2 of PHP. Without making any modifications, I conducted a simple test and encountered errors when registering and uploading files. There are also many outdated writing methods. What is the situation? Will there be a normal version for us to use? Thank you. 
Deprecated: Callables of the form ["Swift_SmtpTransport", "Swift_Transport_EsmtpTransport::construct"] are deprecated in /var/www/flarum/vendor/swiftmailer/swiftmailer/lib/classes/Swift/SmtpTransport.php on line 36 
 
Deprecated: Callables of the form ["Swift_Message", "Swift_Mime_SimpleMessage::construct"] are deprecated in /var/www/flarum/vendor/swiftmailer/swiftmailer/lib/classes/Swift/Message.php on line 46 
 
Fatal error: Uncaught Laminas\HttpHandlerRunner\Exception\EmitterException: Unable to emit response; headers already sent in /var/www/flarum/vendor/swiftmailer/swiftmailer/lib/classes/Swift/SmtpTransport.php:36 in /var/www/flarum/vendor/laminas/laminas-httphandlerrunner/src/Exception/EmitterException.php:15
Stack trace:
#0 /var/www/flarum/vendor/laminas/laminas-httphandlerrunner/src/Emitter/SapiEmitterTrait.php(38): Laminas\HttpHandlerRunner\Exception\EmitterException::forHeadersSent('/var/www/flarum...', 36)
#1 /var/www/flarum/vendor/laminas/laminas-httphandlerrunner/src/Emitter/SapiEmitter.php(21): Laminas\HttpHandlerRunner\Emitter\SapiEmitter->assertNoPreviousOutput()
#2 /var/www/flarum/vendor/laminas/laminas-httphandlerrunner/src/RequestHandlerRunner.php(75): Laminas\HttpHandlerRunner\Emitter\SapiEmitter->emit(Object(Flarum\Api\JsonApiResponse))
#3 /var/www/flarum/vendor/flarum/core/src/Http/Server.php(45): Laminas\HttpHandlerRunner\RequestHandlerRunner->run()
#4 /var/www/flarum/index.php(26): Flarum\Http\Server->listen()
#5 {main}
thrown in /var/www/flarum/vendor/laminas/laminas-httphandlerrunner/src/Exception/EmitterException.php on line 15

luceos

lhy see this: https://discuss.flarum.org/d/36404-stopping-deprecation-warnings

lhy

luceos Thank you very much for your reply. It's not just a reminder issue. There are many errors when uploading files after installation, and the writing style is outdated. The constraints after PHP 8.0 require a lot of code modification. Shouldn't the latest installation package meet the latest requirements? Thank you.

clarkwinkelmann

lhy the Flarum 1.x codebase is written to be compatible with PHP 7.3 and higher. The upcoming Flarum 2.x has bumped this requirement and you will see some more "modern" code. Using new PHP 8 syntaxes usually doesn't bring any benefit to the end user though, only some developers might prefer the new ways code can be written.

Some extension developers have already made their Flarum 1.x extensions PHP 8+ only to get access to these new PHP features, and that's usually not an issue as all forums should be running an actively supported PHP version. The minimum requirements for Flarum core 1.x will likely not be raised, as no more feature upgrades are planned and bumping the system requirements during the security maintenance phase would make no sense.

If you still encounter errors, please follow the troubleshooting guide https://docs.flarum.org/troubleshoot and create a new discussion underSupport with your findings so we can help you resolve it.

IanM

⚠️ New 1.8.10 Core and Tags release ⚠️

Today we announce the release of Flarum 1.8.10, which primarily addresses a security vulnerability in session handling. We strongly recommend upgrading at your earliest convenience.

See CVE-2025-27794 for further information.

Upgrade Instructions

Run the following commands to update:

composer update --prefer-dist --no-plugins --no-dev -a --with-all-dependencies
php flarum migrate
php flarum cache:clear

This release also includes some general improvements, bringing the Flarum 1.x branch one step closer to its final version.

Fixes

change starting position of aria-posinset flarum/framework4192
sanitize page param in Tag flarum/framework4170

Changes

make search debounce time extensible flarum/framework4171
change length of email field flarum/framework4117

Versions

Today's release bumps the versions of flarum/core and flarum/tags, see below:

flarum/core - 1.8.10
flarum/tags - 1.8.4

A big thanks to @glowingblue for collaborating with us to resolve this security issue!

« Previous Page