Hi everyone,

I’ve recently started managing a small website built on XOOPS, and I’m slowly learning the ropes. One topic I keep seeing come up is cybersecurity, especially as open-source platforms can sometimes be more exposed if not maintained properly.

I came across a list of Cybersecurity Interview Questions and Answers while doing some research, and it made me realize how much I still have to learn. Some of the questions touched on CMS vulnerabilities, SQL injection, and proper permission settings—all things that seem highly relevant to XOOPS.

So I wanted to ask: What are some basic steps I should take to secure my XOOPS site? Are there plugins or modules you recommend? I’m especially curious if anyone here has created a checklist or guide for best practices in this area.

Would really appreciate any advice or resources you can share. Thanks in advance for helping a newbie stay ahead of any security issues!

Best regards

Hi all,
Quick question.. has anyone tried running the latest XOOPS core on PHP 8.2? Just wondering if there are any known issues before I upgrade a project. Thanks!

Just chiming in to say I ran into a similar issue after trying to upgrade from 2.5.10 to 2.5.11 on a dev site. The front end loaded fine, but after logging in, I kept getting a blank white page. Turns out it was a module compatibility problem — in my case, an older version of the "Profile" module didn’t play nice with the new core files.

What helped was enabling debug mode via mainfile.php and also checking /modules/system/class/gui/. I replaced it with the default one from the XOOPS 2.5.11 release and things started working again.

Might be worth checking your PHP version too.. I had better luck running it under PHP 7.4 rather than 8.0 for now. Some of the older modules still throw deprecation notices under newer versions.

Hope that helps someone else running into the same wall!

Thanks for sharing this update. I've been using XOOPS for several projects, and it's great to see ongoing discussions and improvements. Looking forward to more enhancements in the future.Quote: