XMB Forum Bugs - Issues

0000569: Reported Posts: add note to the post

Tue, 05 May 2026 23:59:19 -0700

Reported Posts:
- add an Admin setting that allows text along the lines of 'post has been reported' to the actual post or add a new post to the topic/thread [that can be removed later] so that members can see it's already been reported and so hopefully multiple members don't report the same post.

0000893: Board can become unusable if the footer server load display is turned on, and exec() is disabled

Tue, 05 May 2026 23:43:20 -0700

I imagine this might become a problem for some shared hosting and/or free webhosting environments. ByetHost comes to mind as one example who have turned off exec() on their servers.

Might be worth checking if the function exec() exists in PHP and is enabled before doing anything, since if it's not you get this error

Fatal error: Uncaught Error: Call to undefined function XMB\exec() in /home/vol12_1/byethost13.com/b13_41743432/flushedpancake.org.uk/htdocs/board/include/functions.inc.php:979 Stack trace: #0 /home/vol12_1/byethost13.com/b13_41743432/flushedpancake.org.uk/htdocs/board/include/functions.inc.php(908): XMB\Core->ServerLoad() 0000001 /home/vol12_1/byethost13.com/b13_41743432/flushedpancake.org.uk/htdocs/board/admin/index.php(51): XMB\Core->end_time() 0000002 {main} thrown in /home/vol12_1/byethost13.com/b13_41743432/flushedpancake.org.uk/htdocs/board/include/functions.inc.php on line 979

0000892: Fatal Error when trying to edit moderators.

Tue, 05 May 2026 23:36:30 -0700

admin/moderators.php

Fatal error: Uncaught TypeError: XMB\fnameOut(): Argument 0000001 ($rawstring) must be of type string, null given, called in /home/vol12_1/byethost13.com/b13_41743432/flushedpancake.org.uk/htdocs/board/admin/moderators.php on line 69 and defined in /home/vol12_1/byethost13.com/b13_41743432/flushedpancake.org.uk/htdocs/board/include/validate.inc.php:242 Stack trace: #0 /home/vol12_1/byethost13.com/b13_41743432/flushedpancake.org.uk/htdocs/board/admin/moderators.php(69): XMB\fnameOut(NULL) 0000001 {main} thrown in /home/vol12_1/byethost13.com/b13_41743432/flushedpancake.org.uk/htdocs/board/include/validate.inc.php on line 242

0000891: enabling 'show moderator actions' in the admin panel breaks a thread with no post-creation actions done to it

Mon, 04 May 2026 10:03:19 -0700

probably no failsafe for null values

0000890: Allow Caching of Search Results

Mon, 27 Apr 2026 03:32:52 -0700

It's a little annoying that I can't use the browser's Back button to return to my search results in XMB. The caching policy should allow at least temporary reuse of these pages.

0000876: PHP 8.6 Compatibility

Wed, 22 Apr 2026 17:51:37 -0700

Items expected to affect XMB compatibility with PHP 8.6:

Type casting a string that contains alphanumeric data will cause an error. No more (int) '56 stuff' allowed.

0000889: Increase PHP Requirement to v8.4

Wed, 22 Apr 2026 17:35:31 -0700

We are already seeing dependencies like Symfony Mailer that no longer support PHP 8.2. An increase of the PHP version should be considered.

0000877: Update Symfony Mailer to v8

Wed, 22 Apr 2026 17:35:31 -0700

Symfony 8.0 is available and should be updated for testing.

0000880: Quarantine Panel: Post Links are Broken

Wed, 22 Apr 2026 15:48:18 -0700

Instead of linking to the public post address for each quarantined post, which is invalid, the quarantine panel should simply link to the public thread page.

This will require some template modifications, because the post links are currently hard coded into viewthread_post.php and other templates.

0000888: Fatal Error in Quarantine Panel

Wed, 22 Apr 2026 15:48:01 -0700

[22-Apr-2026 15:30:21 America/Los_Angeles] PHP Fatal error: Uncaught TypeError: XMB\Core::quickpage(): Argument # 1 ($things) must be of type int, string given, called in quarantine.php on line 416 and defined in include/functions.inc.php:776
Stack trace:
# 0 quarantine.php(416): XMB\Core->quickpage('3', '30')
# 1 {main}
thrown in include/functions.inc.php on line 776

0000887: Fatal Error in Anonymous Posting

Wed, 22 Apr 2026 15:28:26 -0700

[22-Apr-2026 15:17:25 America/Los_Angeles] PHP Fatal error: Uncaught TypeError: XMB\Settings::put(): Argument # 2 ($value) must be of type string, int given, called in post.php on line 557 and defined in include/Settings.php:131
Stack trace:
# 0 post.php(557): XMB\Settings->put('anon_post_date', 1776896245)
# 1 {main}
thrown in include/Settings.php on line 131

0000886: Fatal Error in faq.php

Wed, 22 Apr 2026 15:11:08 -0700

PHP Fatal error: Uncaught Error: Using $this when not in object context in faq.php:96

0000885: Data Truncation Warning During Upgrade

Fri, 17 Apr 2026 17:16:20 -0700

It is currently possible to overflow the posts.message field while upgrading the posts table with the new encoding.

[17-Apr-2026 15:26:36 America/Los_Angeles] MySQL generated 1 warnings in the following query (log truncated):
UPDATE xmb_posts SET message = '...
array (
'Level' => 'Warning',
'Code' => '1265',
'Message' => 'Data truncated for column \'message\' at row 1',
)

0000884: Undefined Function Error When Upgrading from XMB < 1.9.12

Fri, 17 Apr 2026 17:15:03 -0700

[14-Apr-2026 13:11:44 UTC] PHP Fatal error: Uncaught Error: Call to undefined function XMB\Services\getPhpInput() in header.php:188

0000881: post.php edit truncation issue - probably all xmb versions

Sat, 31 Jan 2026 08:11:02 -0800

xmb_posts.subject is TINYTEXT (can exceed 128 chars, up to 255?)
xmb_threads.subject is VARCHAR(128)

When editing the FIRST post in a thread, XMB updates BOTH tables.
If subject exceeds threads.subject length, MySQL throws:
"Data too long for column 'subject' (errno 1406)"

New-topic posting already truncates correctly, but the EDIT path did not.
To preserve full subject in posts while keeping threads safe:
- Clone the already-escaped subject
- Truncate ONLY the copy used for xmb_threads
- Never modify $dbsubject (used by xmb_posts)

This prevents edit-time errors without changing schema or behaviour.
clone subject for threads
// $dbsubject is already escaped at this point, so replace:

if ((int) $isfirstpost['pid'] == $pid) {
$db->query("UPDATE ".X_PREFIX."threads SET icon='$sql_posticon', subject='$dbsubject' WHERE tid=$tid");
}

with

if ((int) $isfirstpost['pid'] == $pid) {

$dbtsubject = $dbsubject;

// enforce threads.subject length
$query = $db->query("SELECT subject FROM ".X_PREFIX."threads WHERE 1=0");
$tsubmax = $db->field_len($query, 0);
$db->free_result($query);

if (strlen($dbtsubject) > $tsubmax) {
$dbtsubject = substr($dbtsubject, 0, $tsubmax);
}

$db->query("UPDATE ".X_PREFIX."threads SET icon='$posticon', subject='$dbtsubject' WHERE tid=$tid");
}
OR the DB schema could be changed :)

0000882: Subject Schema is Different for Posts and Threads

Sat, 31 Jan 2026 08:05:36 -0800

The subject field length and type needs to be unified because there's no advantage to having them work differently in 2 tables.

0000878: Don't Use the Error Template on 404 Pages

Thu, 08 Jan 2026 15:54:52 -0800

XMB has long used the error template when items are not found.

With v1.9.11, the 404 status code was added to these pages.

Now, we need to stop displaying the error template when items are not found.

0000875: Allow Relocation of config.php

Sun, 28 Dec 2025 07:02:05 -0800

For an extra layer of security, it needs to be possible to change the location of the config.php file without breaking everything.

0000864: PHP 8.5 Backports

Wed, 24 Dec 2025 12:41:21 -0800

Compatibility improvements on the master branch will need to be backported for branch 1.9.12.

0000873: Session Token Encryption

Mon, 22 Dec 2025 10:47:06 -0800

v1.9.12 brought us session tokenization and v1.10 brought us good improvements for password hashing.

Now we need to go a step further and protect session token storage so that any kind of database exposure would not facilitate authentication by a 3rd party.

0000872: Asynchronous Mail Delivery

Sun, 21 Dec 2025 09:08:22 -0800

The Symfony mailer causes significant page load delays when using SMTP. Need to add asynchronous delivery for most situations.

0000870: Attachment Search for Orphaned Files

Fri, 19 Dec 2025 06:22:41 -0800

The attachment search feature does a reasonable job of representing orphaned objects (files that have no associated post in the forums). However, there is no option to specifically find orphaned attachments only.

0000867: Relative paths not working in imagefttext()

Thu, 18 Dec 2025 20:13:18 -0800

I've been unable to verify if this is a PHP issue or a host configuration issue, but switching between PHP 8.4 and 8.5 causes these errors to show up:

[18-Dec-2025 19:15:32 America/Los_Angeles] PHP Warning: imagefttext(): Could not find/open font in include/attach.inc.php

0000865: Function imagedestroy() is deprecated

Thu, 18 Dec 2025 19:33:52 -0800

[18-Dec-2025 19:07:44 America/Los_Angeles] PHP Deprecated: Function imagedestroy() is deprecated since 8.5, as it has no effect since PHP 8.0

0000807: UTF-8 Schema

Mon, 22 Sep 2025 10:28:36 -0700

The diverse string formats in the schema are one of the last things still driving me crazy in terms of maintaining this code base. This is the path forward:

Convert all "double-slashed" strings to unslashed strings, no exceptions.

Start brainstorming tools and procedures for conversion to UTF-8 encoding.

If helpful, add schema columns that would aid the encoding conversion.

Update page headers and templates with the new charset.

Start addressing PHP charset use and any security implications.

Create new translation files.

Determine if non UTF-8 encodings will be supported or dropped completely.