Headlines
| XOOPS Web Application System | ||
|---|---|---|
|
Updated | Sat, 25 Apr 2026 16:31:18 +0000 |
| Description | Powered by You! | |
| Webmaster | webmaster@xoops.org( XOOPS Web Application System ) | |
| Category | Publisher | |
| Generator | Publisher | |
| Language | en | |
| xPages | ||
| Published: | Sat, 18 Apr 2026 05:50:00 +0000 | |
| Description: | xPages - Advanced Static Page Management Module for XOOPS xPages is a professional static page management module developed for XOOPS 2.7.0 and above. It makes content management easier with its user-friendly interface and powerful features. more... | |
| XOOPS 2.7.0 RC5 is here | ||
| Published: | Fri, 10 Apr 2026 16:10:00 +0000 | |
| Description: | UPDATE: XOOPS 2.7.0-RC5 Released for Testing DOWNLOAD: https://github.com/XOOPS/XoopsCore27/releases What's Changed • chore(deps): bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in #22 • show section for system services always, after controlpanel by @ggoffy in #21 • normalize profile and session indexes for 2.7.0 by @mambax7 in #23 • TinyMCE default config was not actually loading the full plugin set. by @mambax7 in #24 • the /install folder is deleted after installation, so we can't call d… by @mambax7 in #25 • SonarQube settings update by @mambax7 in #26 • fix(install): add menusitems FK during fresh install for schema parity (#9) by @mambax7 in #27 • RC-scoped 3.6.4 fixes for PHP 8, dblayertrap, and filter loading by @mambax7 in #28 • fix for skipping index normalisation on profile_field.field_name, if … by @mambax7 in #29 • Setting utf8mb4 as a default by @mambax7 in #30 • fix(xbootstrap5): load runtime scripts in the right order by @mambax7 in #31 Full Changelog: v2.7.0-RC4...v2.7.0-RC5 XOOPS 2.7.0 RC1 — A New Chapter The XOOPS Development Team is pleased to announce XOOPS 2.7.0 Release Candidate 1. Quote: Why the version jump? The cumulative changes since 2.5.11 — PHP 8.2 as the new baseline, Smarty 4, a new admin theme, a rewritten system menu, aggressive security hardening, and a rebuilt dependency chain — far exceeded a patch release. Betas 1–8 published as 2.5.12 remain in the changelog under their original numbers for historical accuracy. Download RC1: https://github.com/XOOPS/XoopsCore27/releases This is a release candidate intended for testing only. Use in a production system is not without risks. Headline Changes Modern PHP PHP 7.x support is dropped. PHP 8.2 is the new minimum; CI runs against 8.2, 8.3, 8.4, and 8.5 on every commit. Dead code for older PHP versions is removed, session handlers are consolidated, and the installer enforces the 8.2.0 minimum. Smarty 4 The template engine moves from the ancient forked Smarty 2 to Smarty 4.5.5. Sites with old Smarty 2 syntax need a review before upgrading. The bundled upgrade/preflight.php scanner identifies outdated themes and module templates before you begin. New Admin Theme: Modern XOOPS 2.7.0 ships Modern, the first major admin UI refresh in years. The existing Transition theme continues to work. System admin themes gain a template overload capability for customisation without patching core files. System Menu — Rebuilt Clean-Room Custom site navigation is now a first-class admin feature. Inspired by MyMenus module by Trabis and work done by Mage, the system menu module is fully rewritten with new tables, controller, templates, CSRF protection, permission handling, cycle detection, and depth limits. Manage categories, items, display order, icons, and per-group permissions from System Admin. Four New Front-End Theme Platforms • xSwatch5 — Bootstrap 5.3.8, successor to xSwatch4. Drop in, pick a Bootswatch variant, done. • xBootstrap5 — Pure Bootstrap 5 reference theme, kept in sync with upstream. • xTailwind — Tailwind CSS + DaisyUI (35 palettes) + Alpine.js, with a new XoopsFormRendererTailwind so forms render natively without overrides. • xTailwind2 — Art-directed sibling of xTailwind with curated palettes and stronger visual hierarchy. Security Hardening • CSRF tokens on all module admin AJAX requests — previously some GET-based toggle handlers had no token validation. • SameSite + Secure session cookies are now admin-configurable (Lax/Strict/None) with secure-by-default values. • eval() removed from core. DB-stored PHP blocks are retired; file-based PHP blocks still work. Protector's lifecycle files also purged of eval(). • unserialize() audit — every core call now uses ['allowed_classes' => false], blocking PHP object injection. • Protector hardened — proper exec() override, input validation on table prefixes, safe badips file handling, failure-aware admin actions. • XSS sweep — all SonarCloud-flagged reflected-data paths escaped. • Open redirect fix — URL scheme check decodes HTML entities before matching, checks scheme only, and is whitelist-based. • Directory traversal — filename allowlists call basename() before the character check. • Multibyte validation — form length checks use mb_strlen() throughout; CJK/Arabic/emoji no longer over-count. • Password comparisons use strict === and hash_equals() throughout. • Request::getInt() Elvis pitfall fixed — 0 no longer silently falls back. Form & UI Fixes • XoopsFormTextDateSelect — renders genuinely empty when stored value is 0 instead of defaulting to today's date. • DHTML editor image width — strict regex replaces permissive parseInt, so real widths are preserved. • Required-field asterisks (*) now render correctly in module admin forms. • Breadcrumbs and xoAdminIcons are consistent across all system admin pages. • PM recipient pickers filter by module access permission. • PM delete confirmation UX improved with centred popups and xBootstrap5 templates. Developer Changes Dependencies Inlined The external xoops/base-requires25 metapackage is removed. All dependencies are listed directly in htdocs/xoops_lib/composer.dist.json . Updated Libraries • Bootstrap 5.3.8 • Font Awesome 7.1.0 • Smarty 4.5.5 • HTML Purifier 4.19.0 • PhpMailer 6.12.0 (moved to /xoops_lib/) • jQuery UI 1.14.1 • TinyMCE 7.9.2 (new default) + 5.10.9 (legacy, retained) • tablesorter 2.32.0 • jquery.form 4.3.1 • jGrowl 1.4.10 Database Layer • queryF() deprecated — use exec() for writes/DDL, query() for SELECTs. • quoteString() deprecated — use quote(). • XoopsDatabase declares error(), errorno(), and query() as abstract methods. • Criteria IN clauses accept arrays safely. • All fetch calls require the two-part isResultSet() + instanceof \mysqli_result guard. Observability XoopsLogger now supports a composite logger pattern — PSR-3 and Debugbar receive raw messages with context rather than pre-formatted strings, opening the door to structured logging. Legacy Cleanup • PSR-12 throughout; legacy @package / @subpackage / @category PHPDoc tags removed. • pda.php handler deleted. • Direct-access guards use http_response_code(404) instead of bare exit(). • htmlSpecialChars() wrapper calls replaced with native htmlspecialchars(). • browse.php now serves source maps for JS/CSS files. Tests & CI • PHPUnit 11 with #[Test] / #[CoversClass] attribute syntax throughout. • SonarCloud, Qodana, Scrutinizer, and CodeRabbit integrated into the PR workflow. • CI now runs the real XOOPS test suite — the silent placeholder test is gone. RTL Support XOOPS 2.7.0 adds right-to-left language support at core level. Arabic, Hebrew, Persian, and Urdu sites now get proper directional rendering in admin and theme templates. System Requirements • PHP >= 8.2.0 (8.4+ strongly recommended) • MySQL >= 8.0 (8.4+ strongly recommended) • Web server: Apache 2.4+ or nginx Upgrading from 2.5.x Supported upgrade path from 2.5.11. Sites older than 2.5.11 should upgrade there first. • Back up site files and database. • Enable debugging; set site offline via System → Preferences → General. • Copy /upgrade/ into your XOOPS root. • Run /upgrade/preflight.php — fix flagged items, repeat until clean. • Copy new htdocs/ contents over your web root. • Copy htdocs/xoops_lib/ and htdocs/xoops_data/ to their configured locations. • Browse to /upgrade/ and step through the prompts. • Update the system, pm, profile, and protector modules from System → Modules. • Turn your site back on. The upgrade script handles: removing legacy HTMLPurifier and PhpMailer locations, creating the tokens table, widening bannerclient.passwd , and inserting the new session cookie preferences. After upgrading, install or update the Protector module. It adds intrusion detection, SQL inspection, and request logging, and received material hardening in this release. This is a Release Candidate This is a release candidate intended for testing only. Use in a production system is not without risks. The feature set is complete and is now fixed for 2.7.0. Only bug fixes will be accepted. • Bug reports: github.com/XOOPS/XoopsCore27/issues • Support forums: xoops.org/modules/newbb/ • Contributing: CONTRIBUTING.md Please download from the current master! If you are downloading this release for testing, please download from the current master instead. Any bugs that have been found and fixed will be included in your testing that way, so we all won't keep finding and reporting the same bug over and over. You can grab the current master here: https://github.com/XOOPS/XoopsCore25/archive/master.zip Full Changelog: v2.7.0-RC1 Thank You Thank you to everyone who submitted pull requests, reported issues, tested betas, translated strings, reviewed security findings, and kept the conversation going on the forums and GitHub. Special thanks to new contributors since Beta 8: @koreus, @CHCCD, and عبدالعزيز الجهني. Standing thanks to JetBrains for complimentary PhpStorm licenses. For the complete change list see docs/changelog.270.txt . For the language-constant diff see docs/lang_diff.txt . Download XOOPS 2.7.0 RC1: https://github.com/XOOPS/XoopsCore27/releases The XOOPS Development Team April 2026 more... |
|
| xTailwind2: A Sharper Tailwind Theme for XOOPS | ||
| Published: | Sun, 05 Apr 2026 00:00:00 +0000 | |
| Description: | xTailwind2 is a new Tailwind CSS and DaisyUI-powered theme for XOOPS 2.5.11+, created to deliver a more polished and modern front-end experience. Instead of feeling like a generic utility-based skin, it focuses on stronger visual hierarchy, cleaner content presentation, and a more intentional overall atmosphere. The theme introduces a floating glass-style navigation bar, a more editorial homepage hero, quieter side rails, and a refined central content canvas that helps articles and module content stand out. It also includes six curated palettes, with both light and dark moods, so the site can shift personality without losing consistency. Under the hood, xTailwind2 keeps the flexibility of Tailwind CSS while tightening the design system around XOOPS itself. Blocks, typography, tables, links, and other raw XOOPS output are styled to feel more cohesive, and the theme switcher remembers the visitor’s preferred light and dark palette choices for a smoother experience. If you want a XOOPS theme that feels lighter, more contemporary, and more design-driven than a standard framework port, xTailwind2 is a strong step forward. Download: https://github.com/mambax7/xtailwind2 more... |
|
| xTailwind — a fresh Tailwind CSS theme for XOOPS 2.5.11+ | ||
| Published: | Sat, 04 Apr 2026 23:50:00 +0000 | |
| Description: | We're excited to introduce xTailwind, a new theme for XOOPS 2.5.11+ that brings the modern utility-first approach of Tailwind CSS to the XOOPS ecosystem. Paired with DaisyUI's elegant component library, xTailwind gives site administrators and developers a fresh alternative to Bootstrap-based themes — without sacrificing any of the features you expect. Why Tailwind? Tailwind CSS has reshaped how modern websites are built. Instead of pre-styled components you override and fight against, Tailwind provides small utility classes you compose to build exactly what you want. The result is less CSS, more control, and designs that don't all look the same. DaisyUI sits on top of Tailwind to bring back the convenience of semantic component classes — btn, card, navbar, modal, dropdown — along with a built-in theming system. It's the best of both worlds: utility-first flexibility when you need it, ready-made components when you don't. 34 Themes, One Click Away xTailwind ships with DaisyUI's full collection of 34 pre-built themes: light, dark, cupcake, corporate, cyberpunk, synthwave, dracula, forest, sunset, nord, and many more. Users can switch between them live from the navbar, with no page reload. The switcher is accompanied by a clean Light/Dark toggle button with a translatable text label. Both preferences are saved to the visitor's browser and persist across sessions. A tiny inline script applies the saved theme before the page paints, so there's never a flash of the wrong colors. Drop-In Simplicity for Site Admins We know most XOOPS site administrators aren't JavaScript developers, and we respect that. xTailwind is a true drop-in theme: download it, copy it into your themes/ directory, activate it in XOOPS admin, and you're done. The compiled CSS ships with the theme. No Node.js. No npm. No build step. Developers who want to customize styles, add components, or bundle a new DaisyUI theme can still do all of that — the source files are right there in the repo, and rebuilding takes one command. But that's an opt-in path, not a requirement. Built for the Modern Web Behind the scenes, xTailwind embraces everything that makes modern web development pleasant: - Alpine.js for declarative interactivity — dropdowns, mobile navigation, toasts, and modals all work without a single custom JavaScript file. Shared from xoops_lib/Frameworks/alpine/ so multiple Tailwind themes can use the same copy. - XoopsFormRendererTailwind — a brand-new form renderer contributed to XOOPS core that outputs native DaisyUI form components. Every XOOPS form (user registration, admin preferences, module settings) renders with proper Tailwind styling, matching whichever DaisyUI theme is active. - Native RTL support via Tailwind's logical properties (ms-/me-, text-start/text-end) and the XOOPS _TEXT_DIRECTION constant. Arabic, Hebrew, and Persian sites get correct mirroring automatically. - WCAG AA contrast baked into every DaisyUI theme's color palette. - Self-hosted with no external CDN dependencies, following the same principle as xSwatch5. A New Architecture, Not a Replacement xTailwind doesn't replace xSwatch5 — it joins it. Site owners who love Bootstrap and the Bootswatch variant collection can continue using xSwatch5 v2.0 (also recently released). Site owners who want to explore a utility-first workflow or prefer DaisyUI's aesthetic can pick xTailwind. Both are supported, both are actively maintained, and both share XOOPS's commitment to stability. For developers building custom themes, xTailwind also serves as a reference implementation. A complete TUTORIAL.md walks through how to create your own Tailwind theme from scratch, plus a class-by-class guide for porting existing Bootstrap themes to Tailwind + DaisyUI. Share a Library, Not the Libraries One of the nicer architectural decisions in xTailwind: Alpine.js lives in XOOPS core's xoops_lib/Frameworks/alpine/ directory, right alongside jQuery and Chart.js. If you build additional Tailwind themes down the road, they all share the same 45 KB Alpine.js runtime. One download for site administrators, one place to update, no duplication across themes. Status and Availability xTailwind is currently released as a proof of concept — the core theme, navigation, block system, theme switcher, and form renderer are all working. Module-specific template overrides (newbb, publisher, wggallery, etc.) are the next phase of development, and community contributions are very welcome. Grab it from the repo, drop it into your XOOPS installation, and let us know what themes you bundle, what components you build, and what you'd like to see next. The future of XOOPS theming is wide open, and we'd love for you to help shape it. Happy theming. Download: https://github.com/mambax7/xtailwind more... |
|
| xSwatch5 v2.0 — Bootstrap 5.3 Arrives, With a Twist You Can Actually See | ||
| Published: | Sat, 04 Apr 2026 15:30:00 +0000 | |
| Description: | We're thrilled to announce the release of xSwatch5 v2.0, a complete refresh of the beloved xSwatch theme family for XOOPS. This release brings your site into the modern web with Bootstrap 5.3.8, and adds some features we think you'll genuinely enjoy using every day. Pick Your Look, Live The headline feature is the brand-new Theme Switcher right in your navbar. With a single click, your visitors can instantly switch between any of the 21 bundled Bootswatch variants — Cerulean, Cosmo, Slate, Darkly, Lux, Minty, and more. No page reload, no admin panel, no fuss. Their choice is remembered across visits. Even better: the switcher builds its list automatically from the theme's CSS folders. Drop a new variant directory in, and it appears in the dropdown. No configuration, no code changes, no cache to clear. Light Mode, Dark Mode, Your Call Right next to the theme picker lives a Dark/Light toggle button with a clear label so users always know what they'll get. It uses Bootstrap 5's native Color Modes API, which means each Bootswatch variant now includes both light and dark styles in a single CSS file. That's half the CSS payload compared to the old dual-stylesheet approach. On first visit, the theme respects the visitor's OS preference. Once they make a choice, it sticks — saved to browser storage with no cookies, no tracking, no HTTP overhead. A tiny script runs before the page paints, so there's never a flash of the wrong theme. Right-to-Left, Out of the Box For the global XOOPS community, v2.0 ships with automatic RTL support. The theme reads the _TEXT_DIRECTION constant from your language pack and Bootstrap 5's logical properties handle the rest — spacing, alignment, dropdowns, and layouts all mirror correctly for Arabic, Hebrew, Persian, and other RTL languages. The Foundation: Modern, Accessible, Clean Under the hood, every template has been rebuilt for Bootstrap 5.3.8. That meant touching dozens of files across the main theme and module overrides for 13 popular XOOPS modules — newbb, publisher, wggallery, xoopsfaq, and more. Along the way we: - Dropped jQuery dependency from Bootstrap (XOOPS core still uses it, but the theme itself is vanilla JS) - Tightened WCAG AA contrast across every color combination in every variant - Fixed absolute image paths so subdirectory installs work correctly - Cleaned up dead code, duplicate selectors, and BS3 leftovers - Switched to the current form renderer (XoopsFormRendererBootstrap5) Compatibility xSwatch5 v2.0 works on XOOPS 2.5.11 and later. The theme runs cleanly on 2.5.11 with RTL auto-detection becoming active on 2.5.12+. PHP 8.2 or newer required. A Family Legacy This release stands on the shoulders of years of community work. The xSwatch story began in 2016 with Richard Griffith's (Geekwright) original theme, evolved through Bootstrap 3 and 4, and got its first Bootstrap 5 migration from Alain01 in 2023. v2.0 builds on all of that — keeping what worked, polishing what didn't, and adding the live theme switching that users have been asking for. Get It Now https://github.com/mambax7/xswatch5 Drop it into your XOOPS themes/ directory, select it in the admin panel, and you're done. We'd love to hear what you think — and if you build a new Bootswatch variant, remember: it just takes a folder drop to get it into the switcher. Happy theming. more... |
|
