Overview Version (1) Discussion (1)

• 

  XenForo Release Edition (Preview)

  2.3.8 (Preview) archive, version 2.3.8 introduces updates in the templating layer, adds search-relat

  2.3.8 preview

  xenforo 3.8

  xenforo release edition
  About this resource

  

  
  

  Overview

  
  Based on a direct file-by-file comparison between XenForo 2.3.7 (full package) and your 2.3.8 (Preview) archive, version 2.3.8 introduces updates in the templating layer, adds search-related API/controller components, includes new CLI rebuild commands and jobs, expands webhook criteria, and updates various vendor dependencies.
  
  

  Important note: the 2.3.8 archive you provided is not a full install package (it lacks entry scripts like index.php/admin.php, lacks install/, data/, internal_data/, etc.). It looks like an upgrade/patch set rather than a complete installer.

  Click to expand...

  
  

  ---

  
  

  What's new in 2.3.8 vs 2.3.7 (observed from your diffs)

  
  

  1) Templates / Templater

  • The template lexer adds support for the ?? (null coalescing) operator, enabling expressions like {$a ?? $b} in templates.
  • New templater functionsare added (declared in Templater), including:
    • array_diff
    • array_reverse
    • array_sum

  2) API / Search extensions

  
  New search-related components appear, e.g.:
  

  • src/XF/Api/Controller/SearchController.php
  • src/XF/Api/Controller/SearchesController.php
  • src/XF/ControllerPlugin/SearchPlugin.php

  This typically indicates expanded/standardized search handling at the API level and via controller plugins.
  
  

  3) New CLI rebuilds and background jobs

  
  Added maintenance utilities:
  

  • CLI rebuild commands:
    • RebuildMessageCounts.php
    • RebuildReactionScore.php
  • New job:
    • src/XF/Job/MessageCount.php

  4) Webhook criteria expansion

  
  Webhook filtering criteria are expanded (examples include):
  

  • Post, ProfilePost, ProfilePostComment
  • Report
  • User, UserUpgrade
    …providing more granular event filtering.

  5) Vendor/dependency updates

  
  There are meaningful updates under vendor dependencies (e.g., AWS SDK-related items, doctrine deprecation handling, CSS parsing libraries), suggesting 2.3.8 is more than a minor patch.
  
  

  ---

  
  

  Recommendations for a NEW INSTALL

  
  If your goal is a fresh install:
  

  1. Do not use the 2.3.8 archive you provided for a clean install (missing install/ and entry scripts).
  2. Use an official full package from a trusted source (ideally xenforo.com).
  3. Post-install best practices:
     • Set correct permissions for data/ and internal_data/
     • Enforce HTTPS and secure your web server rules (block direct access to internal_data)
     • Install add-ons/styles gradually and test compatibility

  ---

  
  

  Recommendations for UPGRADING from 2.3.7 to 2.3.8

  
  If your production site is on 2.3.7 and you want to upgrade:
  
  

  Safety checklist

  1. Full backups
     • Database
     • data/, internal_data/, add-ons, customizations
  2. Test on staging first
     • Clone the site to staging and run the upgrade there before touching production
  3. Confirm package type
     • If you're using an upgrade/patch package: copy only the intended directories/files (e.g., src/, js/, styles/, library/) per instructions
     • Avoid "blind overwrite" with an incomplete package
  4. Verify add-on/style compatibility
     • Especially anything touching templates, search, and webhooks
  5. Run rebuild tasks where appropriate
     • Since 2.3.8 adds message count / reaction score rebuild utilities, consider running relevant rebuilds after upgrading

  ---

  
  

  Critical notes

  • Your archive identifies itself as "2.3.8 (Preview)" → preview builds may change behavior and can be less stable than official releases.
  • Because your 2.3.8 archive is not a full install, it's:
    • Not suitable for fresh installs
    • Potentially fine for upgrading only if it is a legitimate, correct upgrade package
  • Security: comparing "common malware/backdoor patterns" against 2.3.7 did not show obvious suspicious deltasin the core. Still:
    • If the source isn't official, you should verify checksums and/or scan with AV/IDS before production use.

  
• Version

  2.3.8 Stable Available Jan 18, 2026 · 0

  Download

  File size: 22.1 MB

  SHA-256: 275d043ae18a87484ce67dab8d192b161f8e0392e0a29312c8be62427361824d

  SHA-256 verified Package valid Compatibility checked Last verified: Wednesday at 12:10 AM

  View attachment 3627​

  
  

  Overview

  
  Based on a direct file-by-file comparison between XenForo 2.3.7 (full package) and your 2.3.8 (Preview) archive, version 2.3.8 introduces updates in the templating layer, adds search-related API/controller components, includes new CLI rebuild commands and jobs, expands webhook criteria, and updates various vendor dependencies.
  
  

  Important note: the 2.3.8 archive you provided is not a full install package (it lacks entry scripts like index.php/admin.php, lacks install/, data/, internal_data/, etc.). It looks like an upgrade/patch set rather than a complete installer.

  Click to expand...

  
  

  ---

  
  

  What's new in 2.3.8 vs 2.3.7 (observed from your diffs)

  
  

  1) Templates / Templater

  • The template lexer adds support for the ?? (null coalescing) operator, enabling expressions like {$a ?? $b} in templates.
  • New templater functionsare added (declared in Templater), including:
    • array_diff
    • array_reverse
    • array_sum

  2) API / Search extensions

  
  New search-related components appear, e.g.:
  

  • src/XF/Api/Controller/SearchController.php
  • src/XF/Api/Controller/SearchesController.php
  • src/XF/ControllerPlugin/SearchPlugin.php

  This typically indicates expanded/standardized search handling at the API level and via controller plugins.
  
  

  3) New CLI rebuilds and background jobs

  
  Added maintenance utilities:
  

  • CLI rebuild commands:
    • RebuildMessageCounts.php
    • RebuildReactionScore.php
  • New job:
    • src/XF/Job/MessageCount.php

  4) Webhook criteria expansion

  
  Webhook filtering criteria are expanded (examples include):
  

  • Post, ProfilePost, ProfilePostComment
  • Report
  • User, UserUpgrade
    …providing more granular event filtering.

  5) Vendor/dependency updates

  
  There are meaningful updates under vendor dependencies (e.g., AWS SDK-related items, doctrine deprecation handling, CSS parsing libraries), suggesting 2.3.8 is more than a minor patch.
  
  

  ---

  
  

  Recommendations for a NEW INSTALL

  
  If your goal is a fresh install:
  

  1. Do not use the 2.3.8 archive you provided for a clean install (missing install/ and entry scripts).
  2. Use an official full package from a trusted source (ideally xenforo.com).
  3. Post-install best practices:
     • Set correct permissions for data/ and internal_data/
     • Enforce HTTPS and secure your web server rules (block direct access to internal_data)
     • Install add-ons/styles gradually and test compatibility

  ---

  
  

  Recommendations for UPGRADING from 2.3.7 to 2.3.8

  
  If your production site is on 2.3.7 and you want to upgrade:
  
  

  Safety checklist

  1. Full backups
     • Database
     • data/, internal_data/, add-ons, customizations
  2. Test on staging first
     • Clone the site to staging and run the upgrade there before touching production
  3. Confirm package type
     • If you're using an upgrade/patch package: copy only the intended directories/files (e.g., src/, js/, styles/, library/) per instructions
     • Avoid "blind overwrite" with an incomplete package
  4. Verify add-on/style compatibility
     • Especially anything touching templates, search, and webhooks
  5. Run rebuild tasks where appropriate
     • Since 2.3.8 adds message count / reaction score rebuild utilities, consider running relevant rebuilds after upgrading

  ---

  
  

  Critical notes

  • Your archive identifies itself as "2.3.8 (Preview)" → preview builds may change behavior and can be less stable than official releases.
  • Because your 2.3.8 archive is not a full install, it's:
    • Not suitable for fresh installs
    • Potentially fine for upgrading only if it is a legitimate, correct upgrade package
  • Security: comparing "common malware/backdoor patterns" against 2.3.7 did not show obvious suspicious deltasin the core. Still:
    • If the source isn't official, you should verify checksums and/or scan with AV/IDS before production use.

  View attachment 3628
• Discussion

  This resource has a discussion thread on the forum where you can ask questions, report issues, and talk with the author and other users.

  Join the discussion (1)