Overview Version (0) Discussion (1) License

• 

  XenForo Release Edition (Preview)

  2.3.8 (Preview) archive, version 2.3.8 introduces updates in the templating layer, adds search-relat

  2.3.8 preview

  xenforo 3.8

  xenforo release edition
  About this resource

  

  
  

  Overview

  
  Based on a direct file-by-file comparison between XenForo 2.3.7 (full package) and your 2.3.8 (Preview) archive, version 2.3.8 introduces updates in the templating layer, adds search-related API/controller components, includes new CLI rebuild commands and jobs, expands webhook criteria, and updates various vendor dependencies.
  
  

  Important note: the 2.3.8 archive you provided is not a full install package (it lacks entry scripts like index.php/admin.php, lacks install/, data/, internal_data/, etc.). It looks like an upgrade/patch set rather than a complete installer.

  Click to expand...

  
  

  ---

  
  

  What's new in 2.3.8 vs 2.3.7 (observed from your diffs)

  
  

  1) Templates / Templater

  • The template lexer adds support for the ?? (null coalescing) operator, enabling expressions like {$a ?? $b} in templates.
  • New templater functionsare added (declared in Templater), including:
    • array_diff
    • array_reverse
    • array_sum

  2) API / Search extensions

  
  New search-related components appear, e.g.:
  

  • src/XF/Api/Controller/SearchController.php
  • src/XF/Api/Controller/SearchesController.php
  • src/XF/ControllerPlugin/SearchPlugin.php

  This typically indicates expanded/standardized search handling at the API level and via controller plugins.
  
  

  3) New CLI rebuilds and background jobs

  
  Added maintenance utilities:
  

  • CLI rebuild commands:
    • RebuildMessageCounts.php
    • RebuildReactionScore.php
  • New job:
    • src/XF/Job/MessageCount.php

  4) Webhook criteria expansion

  
  Webhook filtering criteria are expanded (examples include):
  

  • Post, ProfilePost, ProfilePostComment
  • Report
  • User, UserUpgrade
    …providing more granular event filtering.

  5) Vendor/dependency updates

  
  There are meaningful updates under vendor dependencies (e.g., AWS SDK-related items, doctrine deprecation handling, CSS parsing libraries), suggesting 2.3.8 is more than a minor patch.
  
  

  ---

  
  

  Recommendations for a NEW INSTALL

  
  If your goal is a fresh install:
  

  1. Do not use the 2.3.8 archive you provided for a clean install (missing install/ and entry scripts).
  2. Use an official full package from a trusted source (ideally xenforo.com).
  3. Post-install best practices:
     • Set correct permissions for data/ and internal_data/
     • Enforce HTTPS and secure your web server rules (block direct access to internal_data)
     • Install add-ons/styles gradually and test compatibility

  ---

  
  

  Recommendations for UPGRADING from 2.3.7 to 2.3.8

  
  If your production site is on 2.3.7 and you want to upgrade:
  
  

  Safety checklist

  1. Full backups
     • Database
     • data/, internal_data/, add-ons, customizations
  2. Test on staging first
     • Clone the site to staging and run the upgrade there before touching production
  3. Confirm package type
     • If you're using an upgrade/patch package: copy only the intended directories/files (e.g., src/, js/, styles/, library/) per instructions
     • Avoid "blind overwrite" with an incomplete package
  4. Verify add-on/style compatibility
     • Especially anything touching templates, search, and webhooks
  5. Run rebuild tasks where appropriate
     • Since 2.3.8 adds message count / reaction score rebuild utilities, consider running relevant rebuilds after upgrading

  ---

  
  

  Critical notes

  • Your archive identifies itself as "2.3.8 (Preview)" → preview builds may change behavior and can be less stable than official releases.
  • Because your 2.3.8 archive is not a full install, it's:
    • Not suitable for fresh installs
    • Potentially fine for upgrading only if it is a legitimate, correct upgrade package
  • Security: comparing "common malware/backdoor patterns" against 2.3.7 did not show obvious suspicious deltasin the core. Still:
    • If the source isn't official, you should verify checksums and/or scan with AV/IDS before production use.

  
• Version

  There are no downloadable versions available for this resource yet.
• Discussion

  This resource has a discussion thread on the forum where you can ask questions, report issues, and talk with the author and other users.

  Join the discussion (1)

• License Terms
  
  By purchasing this resource, you are granted a license to use it on one (1) site, for as long as your license remains valid. You are not purchasing ownership of the underlying code.
  
  How your license works
  

  • Your license is checked automatically in the background. This never affects your site's visitors.
  • As long as your license is valid, this resource keeps working normally — even if our license server is briefly unreachable, a temporary network issue will never disable it.
  • Your license is bound to your site's domain the first time it's used.

  
  Moving to a new domain?
  Contact us and we'll move your license for you.
  
  What's included
  Updates and support for the period stated on this resource's page (see the Version tab for the current release).
  
  What's not allowed
  

  • Sharing your license with others, or using it on more than one site at a time
  • Removing or bypassing the license check in the code