XenForo [DigitalPoint] App for Cloudflare® 1.9.0.3 1.9.0.3

[Xenforo]

View attachment 22464

Features

Everything is available from within XenForo (you do not need to go to Cloudflare for things) via the Cloudflare API. This allows you give admins permission to do certain things (for example block IP addresses within Cloudflare without giving them access to your Cloudflare account).
It simplifies/automates much of the configuration and usage of Cloudflare with XenForo.

• Manage all Cloudflare...

You need to be registered to see the hidden links

 

[Xenforo]

Xenforo updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

IMPORTANT for existing users: A change to Crawler Hint API calls requires a new API permission to be able to set it. You can go to your

You need to be registered to see the hidden links

, edit the token you have and add the following permissions:

• Zone.Zone: Edit

You should have a total of 15 permissions for your API token at this point. If you don't have 15, you can check what you should have under XF Admin -> Options -> External...

You need to be registered to see the hidden links

 

[Xenforo]

Xenforo updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

• Removed repository dependency within R2 adapter
• When checking if a file exists on R2, only fall back to checking if it's a "directory" if there's no file extension in the path (less class A operations)

You need to be registered to see the hidden links

 

[Xenforo]

Xenforo updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

• Selecting Global API keys are disabled (can't setup new ones going forward). Includes deprecation notice (going away completely in the future, so migrate to API tokens if you are still using Global API keys!).
• Unify primary classes so they can be shared without changes with WordPress version of this addon
• If you don't already have a Cloudflare API token, the link to create one will pre-define the required permissions for you (way less annoying for new users)
• Updated...

You need to be registered to see the hidden links

 

[Xenforo]

Xenforo updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

IMPORTANT for existing users: A change to Firewall API calls requires a new API permission to be able to set it. You can go to your

You need to be registered to see the hidden links

, edit the token you have and add the following permissions:

• Zone.Zone WAF: Edit

The Firewall API has been deprecated and turned into a Ruleset API, so no way around the new permission (sorry).

Changes:

• Fixed missing padding on...

You need to be registered to see the hidden links

 

[Xenforo]

Xenforo updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

• Better handling of situation where someone deleted R2 bucket in Cloudflare's dashboard but didn't disconnect that bucket from being used by XenForo yet.
• Fixed issue where we were assuming there was a firewall ruleset for firewall rules (not always the case, so don't assume it exists).
• Fixed issue with logging daily stats if a site isn't using Turnstile for CAPTCHAs
• Requires XF 2.1.0+ (always was the case technically, installer enforces it now)

You need to be registered to see the hidden links

 

[Xenforo]

Xenforo updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

• Better handling of stats rebuilding when rebuilding all stats for the site (from cache rebuild)
• Check if Cloudflare account ID is missing when generating R2 bucket URL and add a server error log if that's the case (if an API token has insufficient permissions, you could end up with a missing account ID, which would in turn make R2 functions not work).
• Backup option works properly again with Firewall rules (forgot to convert that to the new Ruleset API that the firewall uses...

You need to be registered to see the hidden links

 

[Xenforo]

Xenforo updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

• Added check to make sure the site's hostname has at least one dot in it when determining Cloudflare zone ID (things like "localhost" are not valid Cloudflare zones)
• Fetch up to 1,000 R2 buckets per account with API call instead of the default of 20
• If API permissions get revoked on accident, don't throw exception about it on main admin index (admin index won't break if API permissions went away for some reason)

You need to be registered to see the hidden links

 

[Xenforo]

Xenforo updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

• Guest page caching will work properly when a page immediately fires an AJAX request
• Don't try to purge Cloudflare's cache when using guest page caching and an orphaned post is being deleted (when a post is assigned to a thread that doesn't exist)
• Don't include all Zero Trust Access rules in backup (only include rules for your zone/domain)
• Cache Rules included in backup/restore process

You need to be registered to see the hidden links

 

[Xenforo]

Xenforo updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

• Fixed issue with creating Turnstile site via API (Cloudflare updated schema for API call)
• Added ASN support when creating IP address rules
• Cache Cloudflare zone/domain (makes it so an API call is not necessary on the admin index page to build deeplink to your zone in your Cloudflare account)

You need to be registered to see the hidden links

 

[Xenforo]

Xenforo updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

• Fixed issue where you would get a Call to a member function getBody() on array exception instead of the intended HTTP response if an API call failed twice (it automatically does a retry if it failed once)
• When using guest page caching, decouple the purge cache mechanism from the http request (the purge cache action is sent to XenForo's job system)
• Show egress bandwidth when hovering over R2 class A or class B operation stats
• Reorganized settings to align with Cloudflare's...

You need to be registered to see the hidden links

 

[Xenforo]

Xenforo updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

Fix for issue when trying to enable guest page caching (ends up in a loop). Only needed if you don't have guest page caching enabled and you want to enable it.

You need to be registered to see the hidden links

 

[Xenforo]

Xenforo updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

• Can use R2 for storage without site being a domain/zone in Cloudflare
• Made change to XenForo's attachment data entity to be more efficient (normally XenForo checks if an attachment exists before making an additional call to actually get it). This will reduce an API call for every attachment view because we don't need to check if the attachment exists (we know it does already because we have a record of it in attachment data).
• Added new option: Use presigned URLs for...

You need to be registered to see the hidden links

 

[Xenforo]

updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

• Moved Cloudflare options from External service providers to their own Options page
• New option (advanced): Show attachment data errors in server error log
• Add sanity check when using R2 with presigned URLs and users are allowed to upload audio/video media

You need to be registered to see the hidden links

 

[Xenforo]

updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

• Augh! the new option group wasn't included in the 1.7.2 build (sorry)...
• This fixes that.
• Moved Cloudflare options from External service providers to their own Options page
• New option (advanced): Show attachment data errors in server error log
• Add sanity check when using R2 with presigned URLs and users are allowed to upload audio/video media

You need to be registered to see the hidden links

 

[Xenforo]

updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

• Cloudflare changed API results for bot management, but only for paid plans. This addresses that.

You need to be registered to see the hidden links

 

[Pokschubin]

• Added link for info about why each Cloudflare token permission is needed
• Updated deep links into R2 buckets to use new URL endpoint
• Suppress Cloudflare rate limit error when purging URLs from cache when guest page caching is enabled (a very high traffic site could hit API rate limits if there's a zillion posts flowing in at once)
• Better handling of situation where Cloudflare API is down/unavailable
• Cloudflare Workers that are created for the image proxy and unfurl proxy have been rewritten to be ES Modules instead of Service Workers
• Removed "Security -> Privacy Pass Support" setting (it's been deprecated by Cloudflare and is no longer used)

You need to be registered to see the hidden links

 

[Xenforo]

updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

• Added link for info about why each Cloudflare token permission is needed
• Updated deep links into R2 buckets to use new URL endpoint
• Suppress Cloudflare rate limit error when purging URLs from cache when guest page caching is enabled (a very high traffic site could hit API rate limits if there's a zillion posts flowing in at once)
• Better handling of situation where Cloudflare API is down/unavailable
• Cloudflare Workers that are created for the image proxy and unfurl proxy...

You need to be registered to see the hidden links

 

[Xenforo]

updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

• The API calls necessary to build the Cloudflare settings page are now run in parallel (it's currently 10 API calls that were previously made sequentially). Viewing (and editing) settings is significantly faster now (it's as fast as the single slowest API call, rather than as slow as all 10 API calls added together).
• Added more sanity checks for unexpected Cloudflare API results
• Fixed issue where old public domains wouldn't get enabled when setting up R2 bucket for...

You need to be registered to see the hidden links

 

[Xenforo]

updated

You need to be registered to see the hidden links

with a new update entry:

You need to be registered to see the hidden links

• Presigned URLs forcibly set Content-Type and Content-Disposition HTTP response headers (fixes situation where something like rclone set incorrect content type for the object in the R2 bucket)
• Cloudflare statistics charts on admin dashboard dynamically resize properly when resizing window
• Added ability for individual API calls to ignore multiple error codes instead of just one
• Changed FsMounts::getFsAdapters method name to FsMounts::getDpFsAdapters to...

You need to be registered to see the hidden links