RaxBoard Blog — Add-on
A new product is now available on the RaxBoard Marketplace.
Version: 2.0.0 (build 20000)
Compatibility: RaxBoard >=1.8.0
What's new
# RaxBoard Blog 2.0.0
The first marketplace release. Blog began as a portal layer that promoted forum threads into a curated feed; 2.0.0 makes it a publishing platform in its own right.
## Standalone articles
Until now an entry was a pointer: it had no body of its own, and the "article" was the first post of a forum thread, re-parsed on render. You can now write an article that is not a thread at all — `/blog/write`, gated by a new `blog_create_entry` permission that ships closed and is granted to Administrative and Moderating out of the box.
The body is written with the forum's own editor. That is the whole reason images, tables, quotes and code blocks work here on day one: `[img]` and `[table]` are the same tags your members already use, the same parser renders them, and every theme already styles the result. There is no second editor to learn and no second sanitiser to trust.
Thread-backed entries keep working exactly as before. Both kinds live in the same feed, the same categories and the same author archives.
## Public URL moved to /blog
The public surface was `/portal`, which describes a generic CMS rather than what this is. Every page now lives under `/blog`. Old links are not broken: `/portal` and everything beneath it answer with a permanent redirect to the matching `/blog` address, query strings included, so bookmarks, inbound links and search rankings all follow.
The blog also appears in the forum navigation on install. Previously the pages existed but nothing linked to them.
## Security
**Forum permissions are now enforced on every blog read path.** An entry promoted from a restricted forum leaked its title, excerpt and — on the article page — the full body of the first post to any visitor, because the node id was selected but never filtered on. All nine read paths now apply the same fail-closed visibility gate the addon already used elsewhere, including both feeds, the AJAX pagination, the entry-meta and related APIs, and the featured widget.
**The portal permission was inert for guests.** `blog_view_portal` is a shipped, admin-settable permission, but the check returned true for every signed-out visitor before consulting it, so denying it did nothing. Fixed in both places it was written.
**The view-swap configuration endpoint had no guard at all** and now requires the same view permission as the rest.
## Theme compatibility
Three colour options shipped pointing at CSS variables that no stylesheet defines, and the article template hard-coded one of them inline, which poisoned the fallback the stylesheet did provide. All three now use variables defined across the shipped themes, and the inline override is gone. Existing values you have customised are left alone.
Hardcoded hex colours in the stylesheet were replaced with theme tokens (with literal fallbacks where a token is not universal), so the blog follows a theme's palette instead of fighting it.
**Article width.** The reading measure is now applied to the article's contents rather than its container, so a theme that deliberately widens page containers no longer stretches article text to the full window — on one shipped theme that produced a 1200px line length and an oversized cover.
## Fixed
- 29 shipped phrases had never reached the database and rendered as raw keys, because the addon version was never bumped past its installed version and no upgrade step had ever run.
- Appended pages of the entry list are rendered with the same options and reaction data as the first page.
- Dates use the language's own format instead of a hardcoded English one.
- An orphaned internal option left behind by the scheduler is removed on upgrade.
- Uninstall now removes the navigation entry as well; it previously left a menu link that 404s.
## Requirements
RaxBoard 1.8.0 or newer, PHP 8.1+.
Get it
View on the Marketplace
— Posted automatically by the RaxBoard Marketplace.
