MyBB Community Forums

1. Don't see why not.
2. Yes.
3. God yes.
4. See #3

There is no way to open pull requests against 2.0 yet as it is not a public project.

(2015-02-17, 08:44 PM)Euan T Wrote: [ -> ]1. Don't see why not.
2. Yes.
3. God yes.
4. See #3

There is no way to open pull requests against 2.0 yet as it is not a public project.

Would you be able to open one in the private repo?

I won't need a PR, it's just something we can do if we decide to go down that route. MyBB 2.0 is a while off yet

I agree with all, good suggestions .

Resend activation could be done as a task also, automatically re-send the emails if not activated for xx days?

(2015-02-17, 05:03 AM)Ben_Conway Wrote: [ -> ]1. Ability for Administrators to resend a user their activation email. If a user does not receive it a administrator may wish to resend it.

I believe this to be a good idea. As spam has been on the rise, a user may have unknowingly missed the activation email from either the email providers filters or the user setup filters that may have mistaken the activation email as spam. Allowing administrators to resend an email would let users to who missed the first email receive a new activation link in their email. If the second one is still not activated, the administrator could assume the account is false or the email account is invalid (and perhaps a typo that the user may not be aware of). It should not however be a task. Let it be at the administrator's discretion, otherwise it could become a spam problem if handled by a task/cronjob.

(2015-02-17, 05:03 AM)Ben_Conway Wrote: [ -> ]2. Announcements should be giving the feature of to be able to be responded to . Obviously when creating a topic the moderator will be given the option to close the announcement so it is not open for replies.

I'm indifferent on this. I don't object to this. I don't have any boards big enough to warrant using announcements (yet), but I do think that moderators shouldn't override a higher ranking staff members announcement though. If an administrator left the announcement topic open, there's probably a reason for it. That said, some questions have come to mind: Do we (in general) really want moderators overriding an administrators decision to open or close an announcement? Do we (in general) want moderators to close announcements in case an administrator forgets to do it his/herself? Should announcements even be treated like topics? Should announcements automatically be closed by default instead?

(2015-02-17, 05:03 AM)Ben_Conway Wrote: [ -> ]3. Remove the ability to take backups in the admin panel. This can be handy yes, but at the same time if someone gets access they are able to take a copy of the forum.

This would make for a perk for root admins. Root admins, in general, usually only get there if added by the one who controls the files of the forum. We can already define a root admin by their user ID. So, why not make this a root admin exclusive feature? A normal staff member cannot edit a root admin (as far as I know, root admins cannot edit each other, either). I've never tried deleting the file, so I'm not sure if other files are dependent on it (and I don't see a reason why other files would require it), but it could still be useful to those who don't have a website administration panel (we'll use cPanel as an example) from their host that would normally do backups for them. Usually the root admin is the server administrator (or webmaster at the very least). Hypothetically, perhaps someone is receiving free hosting from someone who doesn't have a reseller-type account. Short from asking their non-reseller host of making the backup for them, how else would the forum owner make a backup if they don't have cPanel to work with? Also, if your going to beef up ACP security and since 1.8.4 has 2FA, one could always make the root account have heavy security (require ACP PIN (this is a global feature already in 1.8), Random Generated ACP link, and 2FA (user-specific in 1.8.4)). Just a thought.

(2015-02-17, 05:03 AM)Ben_Conway Wrote: [ -> ]4. Automatically generate admin link which can be a random set of numbers which will increase security of forums. Most admins will not change their admin panel link but if there was a system which assigned a random number during install it would be a good addition.

I would certainly like to see this as an alternative to the ACP PIN, or at least make them independent of each other so they don't conflict with each other if someone wants both or just one of them.

Nice suggestions

Bumping this to be reviewed for suggestions.

Update:

Quote:2. Announcements should be giving the feature of to be able to be responded to.

This bit has been confirmed. Announcements will be treated like threads in 2.0. See here: (click)

I am still curious about suggestions 1, 3 and 4.

A bit surprised to see a convenient feature (for those on shared hosting for example) being considered for removal in name of 'if someone gets access'. Someone getting access to your backend can do a lot of damage, but removal of feature for it? Someone getting access to my FTP or cPanel can do a lot of damage too, I would not be for removing any features from those protocols and tools because of it.

(2015-05-24, 02:52 PM)rgmm Wrote: [ -> ]A bit surprised to see a convenient feature (for those on shared hosting for example) being considered for removal in name of 'if someone gets access'.  Someone getting access to your backend can do a lot of damage, but removal of feature for it? Someone getting access to my FTP or cPanel can do a lot of damage too, I would not be for removing any features from those protocols and tools because of it.

you could do automatic database dumps with a cronjob in cpanel or whatever control panel your host is using if you don't have root access.

http://community.mybb.com/thread-28950.html