"A web installer is also planned for the stable release"

This will be a game changer ?

    knat No doubt about it. It'll definitely hit the Internet big time.

      Pilvinen The biggest flaw right now seems to be all the missing features that would actually make Flarum usable:

      User management

      +1 for this.

      Beta 6 is very stable and useable. However, if you want to manage a community, control who signs up and search and delete users easily, you'll have problems.

      But it works, thx for the beta update.

          This is awesome project! Keep going guys, i see lot of useful and functional platform here. ?

          We all look forward to beta 7, keep up the good work guys! ;-)

          edco For the time-being of course. Once Flarum is stable there will be many more features that are deemed necessary for a forum. ?

            Really looking forward to the next release with installer. It'll be huge! ?

            I really like the look of this forum - and the way it works come to that. What are the pitfalls of using in 'live'? Should I use it then what would be the best way to manage it? Avoid doing what? I'm not really interested in building up a thriving community but just to post stuff and get replies so keeping it simple will work?

            No worries. Found the info I need above.

              MarkJones

              AFAIK the biggest hurdle right now for going live is the lack of user management tools - there's no way to see who has registered to your forums until they post. You can ban them after they have posted but before that - there's no user list where you can select, delete and edit users.

              Then there's nothing to prevent forum spam.

                  MarkJones there is a plugin that is able to do all that. Also had the same problem in my forum but later on I snooped around and i found extensions that made flarum into something cooler.

                    Toby You can also thank @datitisev for the ability to configure SMTP settings in the admin panel, without having to install a custom extension or enter them manually into the database.

                    Hello, @datitisev thanks for integrating SMTP in flarum, but it would be a good idea to implement dropdown lists instead of text entries, as was done in the smtp extension, for the driver (only two options valid : smtp or mail), and encryption (ssl, tls or null). An improper entry will be difficult to debug for the user.

                    At least I hope you have forced lowercase, because in beta-5, SMTP or SSL were not valid.

                        Averell I think we may have discussed the dropdown while I was making the SMTP UI, and we decided against it just in case more types come... I'm not sure, I can't remember.
                        I don't think it forces lowercase, so hopefully that bug in beta5 you are talking about is fixed in beta6.

                        Thanks for your suggestions.

                          Toby A web installer is also planned for the stable release.

                          This must happen before the final release. People need to be able to test this on a wide range of setups. Shared hosting is larger than I suspect you realize.

                            luceos Unfortunately bots these days seem to have a very good success rate with your basic re-captcha. Probably a result of the recent advancements in neural networks. A lot of that work has been open sourced and it's not really that complicated to use.

                            The re-captcha simply doesn't stop the spambots anymore.

                                Pilvinen Probably why Google went to the checkbox for behavior detection instead of letter transposing. And to a visual fallback, again, instead of a typographic one.

                                  We've also had some decent success using a honeypot as well - a form field that's not shown to the user but if filled by an automated system scraping the page, it allows for successful form submission but nothing happens on the backend (no data is written for a new account and no account verification message is sent out). An attack would then have to be customized.

                                  This isn't a solution that's viable on it's own for high-volume sites, but for low volume sites (say under 2000-3000 visits a week) they just seem to move on.