There hasn't been any new info on Codoforum's Facebook or Twitter in over a year. The latest Beta version was also released over a year ago.

Is Codoforum still being actively developed, and is a "Stable" version (safe for production sites) expected in the near future?

I'm wondering this as well. I have it installed and working and love it. But it clearly isn't finished yet. Thanks!

Yes absolutely! Like I said, I love it so far.

I really like it so far and hope for a new release at some point.

No need to cut the developer(s) some slack, as I was not complaining, nor criticizing. I was simply asking a question based on the facts that are public. I am sincerely curious how close a STABLE version is from being a reality. The "road map" has been equally dormant, so there is not a lot of information to go on.

If everything is progressing well and the product is strong and nearing a stable release, then I would think it would be in EVERYONE'S best interest to project a more reflective public image.

Case in point... the version publicly available for download is 3.4 Beta, so if there is a 3.6 version that you feel is stable, it certainly isn't obvious where to download it? Can someone point me to the download and any version history?

I checked the Blog looking for more recent info, but it displays a blank page.

Where can we download 3.6 version?

http://codologic.com/forum/index.php?u=/topic/7889/new-install-of-3-6/1#post-17066
I found a link to a direct download, but it is in a thread riddled with troubleshooting and warnings, so at face value it doesn't project confidence in the average user that this is a stable version. Again, I am not being negative, I am trying to give an outsider's perspective on how the project looks to be evolving.

I have tested CodoForum. I like it, and am hopeful for it's progression. I set it up (3.4) on a test install of a client site, and even went so far as to get Single Sign On (SSO) working. But obviously I can not, in good conscious, install it on a live production site for a client, while it is in Beta.

When I was in my search for a responsive Forum option (In the past I have used the old standards, PHPBB, SMF) I only lucked upon CodoForum, and pretty much every review sited it as a variation of "too new to recommend". I tried it out just out of curiosity and although it is very different from those other forums, I found it interesting enough to join this forum.

Being "too new" could be built up as a positive instead of a negative if the online presence (The CodoForum Website, Blog, Facebook, Twitter) was more active, it might be more attractive, which would help build a user base which would further testing momentum. But perhaps, the developer is not in a position to handle more of an influx of users and associated reports / requests. That, I can understand.

Just trying to help.

My main question is of course, and back to the original topic, is this script still in development? It has huge potential, but, is clearly still in Beta.

@RonAus - I am aware of your thoughts and respect and appreciate your contribution and opinion.

My question is, if 3.6 is a stable (or more stable) release, why is it not publicly available and promoted instead of 3.4 Beta? I'm not beating up on CodoForum, I am suggesting an elevation of it's public appearance, if it is still actively in development and close to a Stable release.

Perhaps we could hear directly from the developer on this topic?

can no longer post - being marked as spam???

Is there a large difference between 3.4 and 3.6? I'm willing to do a fresh install as I've not even opened my site yet.

I found a report of 3.4 having a Cross-Site Scripting issue which does not show a fixed status. Has this been dealt with in 3.6?

@zoldos yes if your site isn't opened yet I would do a fresh 3.6 install

Codoform really needs to monetised by selling add-ons and themes, as I get the impression @admin and @adesh1414127033 are just working on this in their limited spare time and are not making a living form codologic

@zoldos yes if your site isn't opened yet I would do a fresh 3.6 install

That's what I did. Nice version. A lot of features enabled.

Codoform really needs to monetised by selling add-ons and themes, as I get the impression @admin and @adesh1414127033 are just working on this in their limited spare time and are not making a living form codologic

I agree, if this is to become a viable option for live production sites, and if the devs are not able to commit more time to realize that goal because of monetary restrictions, then there needs to be more incentive for them. That is, if they are even interested in the project getting to that level.

Personally (professionally), I would be willing to "donate" to the cause, but issues like the cross-site scripting vulnerability would need to be addressed and publicly noted as "fixed" in order to use this on client production sites.
https://www.curesec.com/blog/article/blog/CodoForum-34-XSS-62.html

I do hope that this can happen relatively soon as this forum is (was) ahead of it's time... but now others are following suit and soon will shadow CodoForum, which would be a shame.

If you read the report for vulnerability, you just have to remove the sys/Ext/hybridauthold folder, as it's the previous version of hybridauh ( and i dont't think it's used in version 3.4 or 3.6...)

So deleting this folder won't affect the rest of the site, it simply prevents this vulnerability?

yep :

The HybridAuth 2.1.2 Install script is vulnerable to XSS attacks. In version 3.4, CodoForum did update HybridAuth to the latest version, but kept the old version in a folder called hybridauthold.

you can test by renaming hybridauthold to whateveryouwant_folder.

the oauth hybridauth login is broken ( at least for google ans m$ ) in 3.6, but wotks fine in 3.4 without this folder...

updating HybridAuth to 2.7 solved the problem...