XOOPS 2.7.2 Final — safer upgrades, stronger foundationsThe XOOPS Development Team is pleased to announce
XOOPS 2.7.2 Final. This maintenance release builds on XOOPS 2.7.0 with another security-hardening pass, more reliable upgrade tooling, form and theme improvements, and refreshed dependencies for current PHP environments.
Download XOOPS 2.7.2: https://github.com/XOOPS/XoopsCore27/releasesHighlightsBug Fixes:* Prevent fatal mysqli_sql_exception errors during installation checks by tolerating missing users tables on fresh installs.
* Ensure the installation wizard does not incorrectly block in-progress, authenticated administrators partway through setup.
* Allow re-installation to succeed by restoring write access to license.php and clearing stale install authentication cookies and key files.
* Fix the initial site setup step to run its administrator-existence query against a properly selected database, avoiding spurious "No database selected" errors.
* Set the default theme for new installations to a bundled theme so the front page loads correctly.
These changes continue the secure-by-default work begun in XOOPS 2.7.0 while preserving compatibility with existing modules.
EnhancementsClean up orphaned installer key files and stale license.php on each run to keep the install environment tidy.
Reminder: Debugbar is now a standalone moduleThe
Debugbar module is no longer bundled in the XOOPS Core download. Moving the module to its own repository lets it publish fixes and improvements without waiting for a core release.
The underlying
php-debugbar/php-debugbar library remains bundled in
xoops_lib, so users do not need to run a separate Composer installation.
To install Debugbar:
* Download the current release from the
XOOPS Debugbar releases page.
* Copy the included
debugbar directory to
htdocs/modules/debugbar.
* Install the module from
System Admin → Modules.
If Debugbar is already installed, replace its module files with the standalone release and run
Update in System Admin. Do not uninstall it first unless you intentionally want to remove its saved settings and profiles.
An overlay upgrade does not delete the old
htdocs/modules/debugbar directory. Existing sites must replace those files explicitly so they do not continue running the older copy that was previously bundled with core.
The core Monolog adapter now exposes
isActive() and accepts a fourth constructor argument for the default file handler's minimum log level, matching the standalone module's integration contract. It also supports Monolog 2 and 3 level handling and bounds or redacts sensitive file-log context.
UpgradingFrom XOOPS 2.7.0* Back up the database and site files.
* Test the upgrade on a staging copy first.
* Turn the site off from
System Options → Preferences → General Settings.
* Copy the new
htdocs/ files over the web root, including the updated
xoops_lib and
xoops_data contents for relocated directories.
* Copy
/upgrade/ to the XOOPS root and run the upgrade wizard.
* Update the
system,
pm,
profile, and
protector modules from
System Admin → Modules.
* Restore or update the standalone Debugbar module if the site uses it.
* Turn the site back on and review the logs.
From XOOPS 2.5.xSites older than XOOPS 2.5.11 should upgrade to 2.5.11 first. Run
/upgrade/preflight.php before copying the 2.7.2 files; it identifies Smarty 4 template incompatibilities and other items that need attention before the main upgrade.
Full installation and upgrade documentation:
https://xoops.github.io/xoops-docs/System requirements*
PHP — >= 8.2.0; PHP 8.4 or 8.5 recommended
*
MySQL / MariaDB — MySQL >= 5.7.8 or MariaDB >= 10.5; a supported MySQL 8.x or MariaDB LTS release is recommended
*
Web server — Apache 2.4+ or nginx
For the complete release history, see
docs/changelog.270.txt.
Reporting issues*
Bug reports: https://github.com/XOOPS/XoopsCore27/issues*
Support forums: https://xoops.org/modules/newbb/*
Contributing: https://github.com/XOOPS/XoopsCore27/blob/master/CONTRIBUTING.mdThank youThank you to everyone who submitted pull requests, reported issues, tested the Beta and RC packages, translated strings, reviewed security findings, and helped other XOOPS users.
A special thank-you to the maintainers of the XOOPS modules, language packs, XMF, RegDom, and the wider dependency ecosystem.
We also thank
JetBrains for supporting the project with
PhpStorm licenses.
Download XOOPS 2.7.2: https://github.com/XOOPS/XoopsCore27/releasesThe XOOPS Development TeamJuly 2026