Is there a guide where I can search how to configure analytics so users only see analytics of their content? Currently, it defaults so they see the analytics for all users. Thanks.
When an "ITEM" on the Timeline is selected to view, the page is not found.
Also trying to add a new "UPDATE"...
From the UNA Wiki we read about remote video transcoding: Install UNA on separate server(s), but connect to the same DB which your main site is using.
What does a path for this connection like this look like, using example.com as the main UNA server instance?
Does this path belong in the inc/header file of the remote server along with similar transcoding settings? Where might that be?
Hello everyone!
With the release of UNA CMS version 14.0.0-RC5, a critical security issue I discovered has been (silently!) fixed. So, it's not just some "security enhancements" (see git.new/zPGNOaK), but an actual fix for a critical Remote Code Execution (RCE) vulnerability (also known as CVE-2025-32101) that might allow unauthenticated attackers to gain full control over the web server. This poses a severe risk to all UNA users and infrastructures, potentially leading to data breaches, service disruption, and full system compromise.
Given the critical nature of this issue, I privately reported it to @Andrey Yasko and the UNA team in order to facilitate a "responsible disclosure". However, so far no public announcements about this vulnerability have been made by the UNA team. So, here it comes my question: how UNA users should be pushed to urgently update their UNA instances without an official announcement? That's why I've decided to open this discussion: to raise awareness among UNA users!
Since I truly believe in the "full disclosure" model, I'm going to publish details about this vulnerability early next week. Hopefully, this will make UNA users to update their UNA instances as soon as possible, in order to prevent potential exploitation.
Is there a way to automatically jump to the last unread post without having to scroll through the old posts again and again?
14rc5 cloud hosted by UNA
I wonder if anybody can confirm problems with report & the report permissions settings and workflow. In my case
- Content can be reported
- Permission settings of report and view reports for membership levels result in an endless spinning wheel
- reports are seen in dash/reports/...module
- reports can not be cleared or deleted, so the RED counter stays active
A full-featured Community Forum module for public and members-only categorised discussions. The UNA Discussions app is a forum & discussions module that can turn your website into a lively conversation hub. Interaction with other UNA features means you can comment on discussions, react to them, categorise them, embed links, pics and videos, embed discussions into groups or apply hashtags using Channels. The Discussion Module has customisable settings and the option to enable Category Visibility (managed via the Permissions Module) so that certain Discussions can only be viewed by designated user levels.
As a Reddit Alternative
Reddit is a social sharing website that markets itself as the 'front page of the internet.' With simple configuration you can create a member site just like Reddit, allowing your users to create and respond to discussions - perhaps your Discussions Forum will be centred around a single topic, a series of topics, or users can create their own groups and have discussions around whatever topic is of interest to them.
As a Quora Alternative
Quora is an elaborate forum where users can post questions around any topic and other users can answer them, with all users voting upon the best and most useful responses, which are then featured for future users. UNA Discussions along with Upvotes and Downvotes can give similar functionality, giving you the infrastructure to create your own question and answer forum.
Key Features:
🏷 Categories
#️⃣ Hashtags
☝️ Featured Discussions
📎 Attachments
🔍 Local search
🗺 Sitewide search support
👍 Likes
📈 Views count
🔁 Reposting
🔗 Social sharing
📝 WYSIWYG editor
📜 List of participants
🛎 Notifications
📌 Pinned Discussions
🔒 Locking Discussion
🙈 Hiding Discussions
⏳ Timeline integration
After upgrade Google Connect I encountered the error: “State parameter doesn’t match,” and the login form displays “Token expired. Please try again.”which prevents login or create new accounts to the website. I cleared the cache via ssh from the folders, as I no longer have access to the studio, and I also restarted the memcached server, but there was no change. Additionally, I cleared the cache from the browser. I will check the logs to see if I can find any errors.
UPDATE:
- I have uninstaled manualy in phpmyadmin Google Connect, I manually replaced all the files of UNA 14.0.0-RC5 core with fresh files from UNA MARKET and only added the old
storagefolder from the previous site, along with the the old modules and theheader.inc.phpfile. I also deleted theinstallfolder, so all core files have been replaced. However, the login error persists. I will manually repl;ace all the module folders to see if this upgrade can be successfully completed or not. The login error persist: Token expired. Please try again. - I tested with both php8.1 and php8.2 the same error The login error persist: Token expired. Please try again.
cat logs/sys_modules.log
Apr 02 02:31:42 [0] CRON :
[upgrade] Cannot get a list of modules which require to be updated.
Apr 02 03:03:06 [0] CRON Array
(
[0] => :
[upgrade] Successfully updated modules:
[1] => Array
(
[bx_artificer] => 14.0.9
[bx_convos] => 14.0.3
[bx_developer] => 14.0.6
[bx_forum] => 14.0.6
[bx_en] => 14.0.9
[bx_notifications] => 14.0.8
[bx_payment] => 14.0.9
[bx_timeline] => 14.0.9
)
)
Apr 03 02:30:02 [0] CRON :
[upgrade] Cannot get a list of modules which require to be updated.
cat logs/upgrade.log
--------- 2024-12-07T04:38:03+00:00
14.0.0.RC1-14.0.0.RC2 upgrade will be applied
Files permissions are ok and can be overwritten
Files copying successfully completed
Deprecated files were successfully deleted or there is no files to delete
System files hash was successfully updated
System SQL script was successfully executed
The following languages will be affected for system:
- No languages will be affected
System after update custom script was successfully executed
--------- 2025-02-06T03:01:10+00:00
14.0.0.RC2-14.0.0.RC3 upgrade will be applied
Files permissions are ok and can be overwritten
Files copying successfully completed
Deprecated files were successfully deleted or there is no files to delete
System files hash was successfully updated
System SQL script was successfully executed
The following languages will be affected for system:
- No languages will be affected
System after update custom script was successfully executed
--------- 2025-03-11T03:01:01+00:00
14.0.0.RC3-14.0.0.RC4 upgrade will be applied
Files permissions are ok and can be overwritten
Files copying successfully completed
Deprecated files were successfully deleted or there is no files to delete
System files hash was successfully updated
System SQL script was successfully executed
The following languages will be affected for system:
- No languages will be affected
System after update custom script was successfully executed
--------- 2025-04-02T03:02:01+00:00
14.0.0.RC4-14.0.0.RC5 upgrade will be applied
Files permissions are ok and can be overwritten
Files copying successfully completed
Deprecated files were successfully deleted or there is no files to delete
System files hash was successfully updated
System SQL script was successfully executed
The following languages will be affected for system:
- No languages will be affected
