Hello everyone!
This is an important release containing several security fixes and other improvements. All users are strongly encouraged to update to this version as soon as possible.
Support/updates renewal
Visit the Feedback System purchase page on Contra to renew your support and updates. Please use your registered email address when placing your order. Once your payment is successfully processed, you'll get immediate access to the latest add-on packages directly on Contra.
Release notes:
2.5.6 for XenForo 2.3
This is an important release containing several security fixes and other improvements. All users are strongly encouraged to update to this version as soon as possible.
Support/updates renewal
Visit the Feedback System purchase page on Contra to renew your support and updates. Please use your registered email address when placing your order. Once your payment is successfully processed, you'll get immediate access to the latest add-on packages directly on Contra.
Release notes:
2.5.6 for XenForo 2.3
Security fixes
- Improper access control and information disclosure: Fixed vulnerabilities that could potentially expose private feedback, ratings, and other restricted information to users without the necessary permissions.
- Improper authorization: Strengthened permission enforcement and validation of feedback-related actions to prevent unauthorized access or submissions.
- Business logic and submission validation: Fixed vulnerabilities that could allow feedback restrictions, submission limits, or duplicate-prevention controls to be bypassed.
- Spam protection enforcement: Improved spam-check enforcement to prevent feedback and comments from bypassing configured content restrictions.
Additions and improvements
- XenForo Approval queue integration: Feedback and comments requiring moderation are now integrated with XenForo's standard Approval queue, allowing moderators to review, approve, or delete individual or multiple items alongside other moderated content.
- Feedback moderation: The existing approval functionality on feedback pages remains available. Pending feedback and comments are visible only to their authors and feedback administrators, with a clear "Awaiting approval" indicator.
- Rating and statistics consistency: Feedback awaiting approval is excluded from ratings and statistics until it has been approved.
- Existing pending content: Previously held feedback and comments are automatically added to XenForo's Approval queue during the upgrade.
- Improved deal URL validation to consistently enforce configured restrictions and content visibility permissions.
- Strengthened feedback submission handling to ensure uniqueness and submission limits are applied consistently.
Bug fixes
- Corrected feedback and rating statistics not updating properly after member account deletion or merging.
- Fixed rating totals not updating correctly when mutual feedback becomes visible.
- Improved the reliability of feedback notification emails and conversations, including notification delays and default settings.
- Fixed errors when editing feedback with unique deal URL enforcement enabled.
- Fixed pagination in feedback lists to prevent missing or duplicate entries.
- Added a "View more" button to the "Feedback left" tab.
- Fixed statistics charts not loading or resizing correctly.
- Fixed the home page auto-reload not respecting the configured "AJAX Auto-reload interval" option.
- Fixed the "Enable latest activity" option not being respected when activity recording was disabled.
- Improved the reliability of data imports and prevented previously imported feedback from being unintentionally removed.
- Fixed additional errors affecting feedback import operations.
- Restored confirmation messages after adding or editing feedback and comments, including appropriate notifications for content awaiting approval.
- Improved feedback form error handling by displaying validation errors in a popup while preserving entered information.
- Fixed pending comments not appearing to their authors on feedback pages. Comments awaiting approval are now displayed with the appropriate status while remaining hidden from other members.
Upgrade notes
- Installation: Upload the updated files and complete the add-on upgrade through the XenForo Admin CP as usual.
- Approval queue permissions: To manage feedback and comments through XenForo's Approval queue, staff members must be XenForo moderators and have the "Can administer" permission in the Feedback System user permissions.
- Spam moderation: Feedback and comments requiring moderation under the configured spam settings are now added to XenForo's Approval queue instead of being rejected solely because moderation is required.
- Obsolete files:The following files are no longer required and can be safely removed if present:
- js/XenCentral/Feedback/autoComplete.min.css
- js/XenCentral/Feedback/fbProfile.js
- src/addons/XenCentral/Feedback/Behavior/User.php
- Deal restrictions: If "None" is selected for deal forums or categories, feedback associated with those deal types will no longer be accepted.
2.4.5 for XenForo 2.2
Security fixes
- Improper access control and information disclosure: Fixed vulnerabilities that could potentially expose private feedback, ratings, and other restricted information to users without the necessary permissions.
- Improper authorization: Strengthened permission enforcement and validation of feedback-related actions to prevent unauthorized access or submissions.
- Business logic and submission validation: Fixed vulnerabilities that could allow feedback restrictions, submission limits, or duplicate-prevention controls to be bypassed.
- Spam protection enforcement: Improved spam-check enforcement to prevent feedback and comments from bypassing configured content restrictions.
- Improper moderation enforcement: Fixed vulnerabilities that could allow restricted or unapproved feedback content to become publicly visible without the required approval.
- Insufficient abuse protection: Strengthened feedback comment validation and submission controls to reduce the risk of spam and excessive activity.
- Import source validation: Improved enforcement of configured import source restrictions to prevent unauthorized remote import connections.
Additions and improvements
- XenForo Approval queue integration: Feedback and comments requiring moderation are now integrated with XenForo's standard Approval queue, allowing moderators to review, approve, or delete pending content alongside other moderated items.
- Feedback moderation: The existing approval functionality on feedback pages remains available, providing an additional way to approve pending feedback.
- Existing pending content: Previously held feedback is automatically added to XenForo's Approval queue during the upgrade.
- Improved deal URL validation to consistently enforce configured restrictions and content visibility permissions.
- Strengthened feedback submission handling to ensure uniqueness and submission limits are applied consistently.
- Improved feedback moderation handling to ensure pending content remains restricted until properly approved.
- Improved comment validation to respect the board's configured message length and posting limits.
- Extended import source host restrictions to all supported import methods.
Bug fixes
- Corrected feedback and rating statistics not updating properly after member account deletion or merging.
- Fixed rating totals not updating correctly when mutual feedback becomes visible.
- Improved the reliability of feedback notification emails and conversations, including notification delays and default settings.
- Fixed errors when editing feedback with unique deal URL enforcement enabled.
- Fixed pagination in feedback lists to prevent missing or duplicate entries.
- Added a "View more" button to the "Feedback left" tab.
- Fixed the "View more" button disappearing from other feedback tabs when loading additional entries.
- Fixed statistics charts not loading or resizing correctly.
- Fixed date range shortcuts not working independently for individual statistics charts.
- Fixed statistics charts not displaying data correctly when only a single feedback entry was available.
- Fixed Latest Activity continuing to refresh after being paused.
- Corrected automatic activity refresh behavior so setting the interval to 0 disables auto-reload.
- Fixed the "Enable latest activity" option not being respected when activity recording was disabled.
- Improved the reliability of data imports and prevented previously imported feedback from being unintentionally removed.
- Fixed additional errors affecting feedback import operations.
- Fixed validation of the "Feedback per page" setting to accept any positive whole number.
- Restored confirmation messages after adding or editing comments, including appropriate notifications for comments awaiting approval.
- Fixed pending comments not appearing to their authors on feedback pages. Comments awaiting approval are now displayed with the appropriate status while remaining hidden from other members.
Upgrade notes
- Installation: Upload the updated files and complete the add-on upgrade through the XenForo Admin CP as usual.
- Approval queue permissions: To manage feedback and comments through XenForo's Approval queue, staff members must be XenForo moderators and have the "Can administer" permission in the Feedback System user permissions.
- Obsolete files:The following file is no longer required and can be safely removed if present:
- src/addons/XenCentral/Feedback/Behavior/User.php
- Deal restrictions: If "None" is selected for deal forums or categories, feedback associated with those deal types will no longer be accepted.
Last edited: