| XF 2.3 Released (Premium) XenForo Release Edition (Preview) 2.3.8

Overview

Based on a direct file-by-file comparison between XenForo 2.3.7 (full package) and your 2.3.8 (Preview) archive, version 2.3.8 introduces updates in the templating layer, adds search-related API/controller components, includes new CLI rebuild commands and jobs, expands webhook criteria, and updates various vendor dependencies.

Important note: the 2.3.8 archive you provided is not a full install package (it lacks entry scripts like index.php/admin.php, lacks install/, data/, internal_data/, etc.). It looks like an upgrade/patch set rather than a complete installer.

Click to expand...

---

What's new in 2.3.8 vs 2.3.7 (observed from your diffs)

1) Templates / Templater

• The template lexer adds support for the ?? (null coalescing) operator, enabling expressions like {$a ?? $b} in templates.
• New templater functionsare added (declared in Templater), including:
  • array_diff
  • array_reverse
  • array_sum

2) API / Search extensions

New search-related components appear, e.g.:

• src/XF/Api/Controller/SearchController.php
• src/XF/Api/Controller/SearchesController.php
• src/XF/ControllerPlugin/SearchPlugin.php

This typically indicates expanded/standardized search handling at the API level and via controller plugins.

3) New CLI rebuilds and background jobs

Added maintenance utilities:

• CLI rebuild commands:
  • RebuildMessageCounts.php
  • RebuildReactionScore.php
• New job:
  • src/XF/Job/MessageCount.php

4) Webhook criteria expansion

Webhook filtering criteria are expanded (examples include):

• Post, ProfilePost, ProfilePostComment
• Report
• User, UserUpgrade
  …providing more granular event filtering.

5) Vendor/dependency updates

There are meaningful updates under vendor dependencies (e.g., AWS SDK-related items, doctrine deprecation handling, CSS parsing libraries), suggesting 2.3.8 is more than a minor patch.

---

Recommendations for a NEW INSTALL

If your goal is a fresh install:

1. Do not use the 2.3.8 archive you provided for a clean install (missing install/ and entry scripts).
2. Use an official full package from a trusted source (ideally xenforo.com).
3. Post-install best practices:
   • Set correct permissions for data/ and internal_data/
   • Enforce HTTPS and secure your web server rules (block direct access to internal_data)
   • Install add-ons/styles gradually and test compatibility

---

Recommendations for UPGRADING from 2.3.7 to 2.3.8

If your production site is on 2.3.7 and you want to upgrade:

Safety checklist

1. Full backups
   • Database
   • data/, internal_data/, add-ons, customizations
2. Test on staging first
   • Clone the site to staging and run the upgrade there before touching production
3. Confirm package type
   • If you're using an upgrade/patch package: copy only the intended directories/files (e.g., src/, js/, styles/, library/) per instructions
   • Avoid "blind overwrite" with an incomplete package
4. Verify add-on/style compatibility
   • Especially anything touching templates, search, and webhooks
5. Run rebuild tasks where appropriate
   • Since 2.3.8 adds message count / reaction score rebuild utilities, consider running relevant rebuilds after upgrading

---

Critical notes

• Your archive identifies itself as "2.3.8 (Preview)" → preview builds may change behavior and can be less stable than official releases.
• Because your 2.3.8 archive is not a full install, it's:
  • Not suitable for fresh installs
  • Potentially fine for upgrading only if it is a legitimate, correct upgrade package
• Security: comparing "common malware/backdoor patterns" against 2.3.7 did not show obvious suspicious deltasin the core. Still:
  • If the source isn't official, you should verify checksums and/or scan with AV/IDS before production use.