Osclass 8.4.0

What's Changed

Osclass 8.4.0 (2026-10-02).

Highlights

• Minimum PHP version raised from 7.2 to 7.4
• Listing statistics rebuilt around daily measures on t_item_stats, with admin Overview/Listing details, user charts, presets, CSV export, and retention cleanup
• New Reports feature replaces legacy Mark as (listing and user reports, conversation, backoffice management, email templates)
• Backoffice data tables refactored: sortable columns, pagination, filters, bulk/row actions, plus CustomDataTable for plugins
• Theme widgets are multilingual (per-locale HTML, shared code/CSS, device visibility, Manage widgets data table)
• Alerts rewritten for a more predictable send model, with expiration settings and richer stock English notification emails
• Categories, custom fields, currencies, and languages management redesigned on the standard data-table pattern

Upgrade notes

• Hosts must run PHP 7.4 or newer
• Old Mark as UI and t_item_stats mark columns are removed; upgrade creates t_report / t_report_comment. Compatibility helpers remain so older themes keep working; Mark as URLs and form posts open the new report form
• Listing statistics storage and admin Statistics pages change; review Statistics settings (collection presets, chart measures, retention). Do not send commerce-style counters through the public item_stats AJAX action
• Alerts may expire based on User settings. New constant MAX_ITEMS_PER_ALERT defaults to 50. Stock en_US alert bodies are updated only when unmodified
• Static page URLs are built from the current locale title (localized URLs). Category slug uniqueness suffixes use a hyphen (for-sale-1); old underscore URLs still resolve
• Duplicate English flash/label msgids were consolidated in core and theme catalogs; recheck custom translations if you override those strings

Added

• Reports: front report pages, backoffice Reports section, settings, toolbar notifications, dashboard widget, friendly URLs, email templates email_report_admin / email_report_user
• Optional Contact form reports (type webcontact) in General settings (off by default)
• Listing stats helpers: osc_increase_item_stat(), osc_increase_item_stats(), session seen helpers, optional data-osc-stat click tracking, chart audience filters
• Admin Statistics hooks for plugin charts (admin_stats_load, KPI/main/side slots, settings hooks)
• Multilingual widgets helpers: osc_widget(), osc_count_widgets(), osc_has_widgets(), osc_widget_content(), osc_widget_code()
• Alerts v2 JSON replies via hidden input alert_version=v2; alert expiration settings; richer alert email placeholders
• Currency exchange rates on Manage currencies
• Category bulk actions for enable/disable/delete, price field, and configurable expiration lengths
• Automatic Cleanup Settings; Optimization option to check/analyze/optimize/flush all database tables
• Backoffice Send message popup to email users; add comment from backoffice; maximize widget boxes
• Tools > Statistics merges location, category, and user recalculation
• Filter item_delete_image; install checks for mb_strlen / mb_substr
• Image regenerate/refresh batch size settings; backup list with download and delete

Changed

• Admin Statistics: Overview first, Listing details under Listings, KPI cards with period comparison, 65/35 chart layout, remembered period cookie
• User summary and listing charts: HTML/SVG, configurable types and period tabs, Tableau-based palette (plugin override filters available)
• Built-in auto-cron: uses MINUTELY t_cron (at most once per 5 minutes), claims d_next_exec before self-request, no nested cron self-requests
• Unzip uses ZipArchive::CREATE and accepts more zip layouts (backslashes, missing folder entries)
• jQuery UI default asset downgraded to v1.8.24 for backoffice jQuery compatibility
• Cascading category select on publish when parent publishing is disabled; location fields no longer required in backoffice
• Duplicate category slug suffix style; hreflang builds locale-specific listing and search URLs
• Languages table redesign; Sigma removes deprecated donate box and multisite reference
• Regenerate images and Tools > Backup flows optimized for large sites
• Validation hooks no longer require a trailing comma; jquery validate additional-methods loaded for item form

Fixed

• Public profile listing search escapes keywords and allows only known sort columns
• TinyMCE listing descriptions keep formatting tags and strip scripts and event handlers
• Accented search keywords kept in friendly search URLs; keyword fields show &, quotes, and angle brackets as typed
• Canonical URL overrides on search; enhance canonical keeps the current locale
• Listing and category URLs no longer use a slug from another locale
• Long-format language codes in the URL no longer send listing clicks to the home page
• Extra whitespace before HTML in Sigma on some pages
• Redis cache issues
• Missing space in backoffice header link titles; ajax uploader getOriginalName on invalid files
• Expiration date updates reject incomplete or invalid dates
• Latest search security and stop-word validation improved

Security

• Public profile listing search escapes keywords and restricts sort columns
• TinyMCE strips scripts and event handlers from listing descriptions
• Public item_stats AJAX requires session CSRF (octoken), one measure per request, and ignores action counters
• Latest search feature hardened with stronger stop-word validation

Compatibility

• PHP: 7.4 minimum, up to 8.5
• Library dependencies require PHP 7.4+

Links

• Full changelog: https://osclass-classifieds.com/changelog
• Compare: v8.3.1...v8.4.0

Osclass 8.3.1

What's Changed

Osclass 8.3.1 (2026-01-13).

Highlights

• Full PHP 8.5 support, including updated core libraries (PHPMailer and others)
• Session and cookie handling rewritten for stronger defaults (HttpOnly, Secure on HTTPS, encoded cookie values)
• Broader utf8mb4 / emoji database conversion during upgrade
• Better backoffice ops: debug log picker, locations UI, email template cleanup, cron health warnings
• Search and routing improvements (relevance sort, theme routes, richer route params)

Upgrade notes

• Users and admins may be logged out after upgrade because session/cookie storage changed
• Cookies are HttpOnly by default. JavaScript-readable cookies need a key containing _unsercure, _unsec, or _js, or starting with ocjs_, and must not start with oc_
• On HTTPS, cookies are marked Secure
• Upgrade may convert connection/database/table charset and collation to utf8mb4 / utf8mb4_unicode_ci. This can take time on large sites
• If utf8mb4 conversion fails, define UPGRADE_UTF8MB4_SOFT for a softer upgrade, then finish remaining SQL with osc_utf8mb4_sqls() or run those statements manually
• Automated upgrades from osclass-classifieds.com keep renamed oc-admin / oc-content folders. Manual zip upgrades still need a manual folder rename
• After enabling or disabling subdomain type, frontend cookies are dropped; users may need to clear browser cookies
• Search uses iPerPage instead of iPagesize

Added

• Helpers: osc_{get/set/drop}_{view/cookie/session/param}
• Cookie helpers: _get, _set, _drop
• osc_get_prev_url() and osc_get_next_url() for prev/next head links
• osc_static_page_url_from_page($page, $locale = '')
• osc_email_template_create() and osc_email_template_delete()
• Theme routes pointing into the theme, or theme custom / plugins folders
• Route support for exploded sParams and query-string params
• Backoffice option to block search-engine indexing (Settings > Block indexing)
• Relevance ordering on search when a pattern is present
• Manual language sync with filesystem .po files
• Daily cron cleanup for oc-content/uploads/temp
• Admin dashboard warnings for hourly cron / built-in cron issues
• Extra action buttons on user profile edit in backoffice
• Persistent plugin search term in backoffice session

Changed

• Debug/Error log UI can open any *.log under oc-content (including Osclass Pay logs)
• Curl requests expose richer headers and diagnostics
• Search sorting management improved; logged-in admins can request higher per-page values
• osc_search_url() omits iPage when page is <= 1
• Comment settings link shown under Settings
• Locations management layout refreshed
• TinyMCE improved on mobile
• Static CSS/JS cache cleaning improved when optimization is enabled
• API key validation and external URL response handling improved
• Action logs improved
• Comment reply notification is sent to the parent comment author when emails differ
• Validation/activation resend limited to once every 5 minutes

Fixed

• Missing vendored HTMLPurifier/Config.php (excluded by .gitignore on case-insensitive filesystems), which caused a fatal error on fresh installs
• Backoffice item search by item id
• Search pagination broken by cache; stronger cache keys (time/timestamp masked; more filters/hooks in key)
• Incorrect redirects after login from bad URLs in navigation history
• User stats counting only active listings and active comments
• Incorrect "email visible" state on item form
• Sigma: when guest comments are disabled, only the form is hidden (not the whole comments block)
• Commenting with an email different from the logged-in user
• User items URL returning 404 after upgrade to 8.3.0
• Custom search rules pagination
• Alerts no longer sent to banned addresses
• Alert emails for non-registered users

Security

• Cookies default to HttpOnly; Secure when SSL is on
• Cookie values encoded to reduce WAF / mod_security false blocks
• Cookie names sanitized
• Option to block site indexing by search engines

Compatibility

• PHP: up to 8.5
• Includes updated bundled libraries used by core (notably PHPMailer)

Links

• Full changelog: https://osclass-classifieds.com/changelog
• Compare: v8.3.0...v8.3.1