Hosting Xoops


Xoops is an open source content management and portal application. Xoops forked from PHP-Nuke in 2002.

1 click installation Xoops

1 click installation

Easy update Xoops

Easy update

Backup and restoration Xoops

Backup and restoration


Content Management
Current version
Last update
3 August 2020

System Requirements

Installation size
38.00 MB
open source
What's new
2.5.10 (security release)
3 August 2020 - 38MBHighlights
  • PHP 7.3 compatibility
  • MySQL 8.0 compatibility
  • XMF improvements for module writers
  • Security updates
  • Updated libraries
  • and many more fixes and updates

Read more:

2.5.9 (security release)
18 October 2017 - 38MBHighlights
  • Important security updates
  • PHP 7.1 compatibility
  • Updated Themes
  • Modernized Install and Update
  • Multi-File Uploads for Imagemanager and Avatars
  • Bootstrap support in Forms
  • many more fixes and updates

Read more:

30 May 2016 - 38MB
  • replaced "dirname(__FILE__)" with "__DIR__" since the min. PHP is now 5.3.7, and __DIR__ is faster (mamba)
  • updating some copyright notices (mamba)
  • fix issues when protector 'id_forceintval' preference is enabled, that manifests as an error when deleting private messages. (rgriffith)
  • fix for Update setting Template import date to 0 (timgno/mamba)
  • Adding language constants for Protector's Prefix Manager (slider84/mamba)
  • allowing for "https" URL in YouTube links in Textsanitizer (mamba)
  • converting $i++ to ++$i for improved performance (mamba)
  • reverting couple of $i++ conversions (zyspec/mamba)
  • updated xBootstrap to Bootstrap 3.3.1 (Angelo Rocha)
  • Some code cleanup for private messages (Dingjie (Daniel) Yang/rgriffith)
  • Adding Footer blocks (timgno/mamba)
  • fixing a bug in xmlrpc.php (wppd/rgriffith)
  • remove addrFormat override in XoopsMultiMailer (rgriffith)
  • patch from Xoops 2.5.6 XoopsFormSelectUser is not compatible with some old modules like xNews (luciorota)
  • fix "setExtra" in moduleadmin.php, Admin buttons can now use "onClick" assignments (mamba)
  • updated XOOPS copyright to 2016, changed links to (mamba)
  • replaced intval() with (int) (mamba)
  • added possibility to include full icon URL in module's menu.php (mamba)
  • added strong { font-weight: bold; } to reset.css (mamba)
  • added .tpl option for module Help files (mamba)
  • fix moved "count($tagsArray)" and "count($attrArray)" outside of FOR loop in xoopsfilterinput.php (mamba)
  • add option to set height of Themes block (mamba)
  • fix: Invalid argument supplied for foreach() (cesagonchu/mamba)
  • removed -khtml CSS properties (mamba)
  • fix profile/search (cesagonchu/slider84)
  • changed minimum image sizes in Image Manager to: 800x600, 1MB (mamba)
  • added image sort order in TinyMCE image-manager plugin (elpaksu/Peekay)
  • added Youtube handling enhancements (xd9527/geekwright)
  • fix system module update issue (zyspec)
  • fixed multiple issues (CSRF, weak password hash, and directory traversal) reported by hyp3rlinx (geekwright)
  • fix privileged information disclosure issue reported by Cédric MONTUY (geekwright)
  • Move to supported PHP mysqli extension for database access (redheadedrod/geekwright)
  • IPv6 safe in comments, protector, sessions and online
  • Include XMF library (geekwright)
  • Updated TinyMCE to 3.5.11 (mamba)
  • Updated PHPMailer to 5.2.14 (mamba)
  • Updated jQuery to 1.12.4 (mamba)
  • Updated jQuery UI 1.11.4 (mamba)
  • Updated jGrowl to 1.4.4 (mamba)
  • Updated phpThumb to 1.7.14-201603240806 (mamba)
  • Updated HTML Purifier to 4.7.0 (mamba)
  • Updated Bootstrap to 3.3.6 (mamba)
  • Updated Snoopy to 1.2.5 (zyspec)
  • Updated SWF banners to HTML5 (mamba)
  • Updated extra banners (mamba)

Read more: (security release)
3 January 2016 - 38MBRead more:
25 November 2014 - 38MBSecurity fixes:
  • CSRF and XSS issues reported by Dingjie 'Daniel' Yang of Qualsys
  • XSS and best practice issues reported by Narendra Bhati

Read more:

display more versions
2.5.7 (security release)
17 June 2014 - 38MBSecurity fixes:
  • XSS issues reported by Mehdi Dadkhah (rgriffith)
  • Fix security issues reported by Pedro Ribeiro of Agile Information Security (rgriffith)
  • Fix XSS issue reported by Manuel Garcia Cardenas (rgriffith)

  • ID: 1143 (old ID 430840) class/module.errorhandler.php (uberrookie/zyspec)
  • ID: 1225 Restore user theme choice during "Remember me" processing. (rgriffith)
  • ID: 1226 Change value of clickable due to issues centering on CaricaFoto script (rgriffith)
  • ID: 1227 Sorting bug in Profile module search (Zyspec)
  • ID: 1246 Fallback to english for admin theme language files if no language specific file exists (rgriffith)
  • ID: 1261 Fix as proposed by Irmtfan (irmtfan/rgriffith)
  • ID: 1268 reduce db load if XoopsFormSelectUser is called multiple times in a page load (rgriffith)
  • ID: 1269 Block template file will not updated after update the module (irmtfan)
  • ID: 1270 template issue in email notifications (changed X_ITEM_TILE to X_ITEM_NAME) (alain01/slider84/mamba)
  • ID: 1271 install last page no css/js (tarik/rgriffith))
  • ID: 1272 delete functions always return true (rgriffith)
  • ID: 1273 template duplicate issue (irmtfan)
  • ID: 1274 prevent multiple inclusions of a module's xoops_version.php (irmtfan/rgriffith)
  • ID: 1278 _AM_SENDMTOUSERS missed (Mowaffaq/mamba)
  • ID: 1281 initialize arrays as empty arrays rather than null (rgriffith)
  • ID: 1285 check if session exists before attempting to start a new one (wishcraft)
  • ID: 1287 assigning "static" to various class methods (wishcraft/mamba)
  • ID: 1291 xoops_getModuleOption() did not respect $dirname (rgriffith)
  • ID: 1382 add cleanup of unused avatar resources to admin maintenance page (rgriffith)
  • reversing fix for potential lack of rendering css and javascript in Installer on the last screen by culex
  • removing @ in link[@rel*=style][title] in styleswitch.js (not needed in jQuery 1.83) (SMEDrieben/Mamba)
  • added missing "`" in upgrade from 2.0.18 to 2.3.0 (mamba)
  • fixing errors in upgrade from 2.4.0 to 2.4.1 (mamba,voltan)
  • added check for menu link description in ModuleAdmin
  • fixed wrong return icon in Smarty xoModuleIcons32
  • fixed issue with jGrows in xoops.css (xoobaru/tarik)
  • fix for deprecated "preg_replace/e" function in PHP 5.5 (mamba)
  • added: check if 'date.timezone' is set in php.ini, if not, set it to UTC (cesag/mamba)
  • assigned _SHORTDATESTRING to _CAL_FORMAT to have consistency in local languages (jcweb/guspel)
  • fixed bug in calendar.js (mamba)
  • added link to Module's Admin after "Update" (currently only to XOOPS Modules section) (mamba)
  • added placeholder for a link to upload test data, if available after installation (mamba)
  • solved bug into PM module readpmsg.php (escrime-info/slider84)
  • fixed missing check on variable in userinfo.php (cesag/mamba)
  • replaced extract($_POST) in /include/comment_delete.php with filters (mamba)
  • adding some missing generic default fonts (mamba)
  • removing some unreachable statements (mamba)
  • replacing deprecated HTML tags (mamba)
  • bug in commentrenderer.php (Roby73/irmtfan)
  • added missing info about new language constants in Fast Comments (irmtfan/mamba)
  • fixed Undefined index: uid in file /modules/profile/userinfo.php line 24 (cesag/mamba)
  • set minimum PHP version to 5.3.7 (mamba)
  • added missing apostrophe corrections for Date types in CleanVars in /class/model/write.php
  • added function escape to XoopsMySQLDatabase, needed for Formulize (jegelstaff)
  • added blank.gif images to ModuleAdmin icons (timgno)
  • addedd [soundcloud] BB code as supplied by (iHackCode/rgriffith)
  • fix for cancel button in javascript (currently it still entered the text, even if canceled) (mamba)
  • added "module_status" to show with module Version (mamba)
  • patch for input validation bypass issue reported by Tatane (tatane/rgriffith)
  • change default value for usercookie config to match change in 2.6.0. (rgriffith)
  • correct method used to determine the current effective language.(rgriffith)
  • fix errors "PHP Strict standards: Redefining already defined constructor" under PHP 5.5 (rgriffith)
  • fix to correctly load the CSS file into the header in ModuleAdmin (Bleekk, Alfred)
  • added "title" to buttons in DHTML Editor (mamba)
  • updated required PHP and XOOPS versions, module versions in modules (cesag/mamba)
  • added xBootstrap theme (UI/UX Team: Angelo Rocha, Bleekk, Heyula)
  • added extra escape for "e" in YESTERDAY definition in locale.php, which was added in PHP 5.4 (madDan)
  • fixed PHP minimum version comparison in ModuleAdmin (mamba)
  • fixed System Module image manager and popup image manager save images in different directories(luciorota)
  • added PHPDoc comments for classes and functions (mamba)
  • fixed System Module image manager html/js bugs (luciorota)
  • replaced "array_diff_assoc" with "array_diff_key" in /class/theme_blocks.php (masel/mamba)
  • icons for active module sections in System module not shown correctly (Slider84/mamba)
  • added two new language definitions (see lang_diff.txt)
  • added Office 2007 MIME types (Voltan)
  • added xml MIME type (Goffy)
  • added new icons (mamba)
  • updated XoopsMediaUploader to use system memory values from php.ini, and to offer random file names (mamba/luciorota/zyspec)
  • added .tpl to XoopsList's getHtmlListAsArray (wizanda)
  • updating xBootstrap (voltan, Angelo Rocha)
  • moved all images, CSS, and JS files to /assets in modules Profile and PM (mamba)
  • renamed .html Smarty templates to .tpl in modules Profile and PM (mamba)
  • corrected English typos (cesag)
  • added missing .php file extension (AngeloRocha/Zyspec/rgriffith)
  • deprecated destoryVars($var) in object.php (cesag/rgriffith)
  • update phpmailer translation array to include all keys, and remove reassignment of $PHPMAILER_LANG as array() (cesag/rgriffith)
  • added XoopsRequest class (rgriffith)
  • removed hard-coded text from installation (mamba)

  • jQuery to 1.11.0 (mamba)
  • jQuery UI 1.10.4 (mamba)
  • jQuery Lightbox to 1.2.3 (mamba)
  • jQuery Form to 3.50.0 (mamba)
  • jQuery Tablesorter to 2.5.11 (mamba)
  • jGrowl to 1.2.14 (mamba)
  • prototype.js to 1.7.1, Aug 2012 (rgriffith)
  • HTML Purifier to 4.6.0 (mamba)
  • TinyMCE to 3.5.11 (mamba)

Read more:

2.5.6 (security release)
29 April 2013 - 38MBSecurity fixes:
  • XSS/CSRF vulnerability in system/admin/groupperm.php (Dingjie Yang,Qualys/trabis)
  • XSS/CSRF vulnerability in system/modulesadmin/main.php (Dingjie Yang,Qualys/trabis)
  • XSS/CSRF vulnerability in system/admin/blocksadmin/main.php (Marcin,Ariko-Security Team/trabis)
  • LFI vulnerability in system/admin/tplsets/jquery.php (Marcin,Ariko-Security Team/trabis)

  • updated English translations (Cesag,Mamba)
  • extra check for $noHtml in XoopsEditorHandler->get (luciorota)
  • fixing $GLOBAL typo in jquery.php (Zyspec)
  • Array to string conversion (geekwright/mamba)
  • issues with missing xoopscomments table (geekwright/sabahan/Mamba)
  • bug with using reference for non-variables (geekwright/mamba)
  • number of users when "all groups" selected was wrong (tatane/mamba)
  • fix for potential lack of rendering css and javascript in Installer on the last screen (culex)
  • fix for missing Protector logo under PHP 5.4 (mamba)
  • replacing ereg with preg_match in userutility.php (pmartina/paul)
  • #1219 dhtmltextarea editor accent not displayed (cesag/alain091)
  • added missing call for user language in /profile/index.php (xoobaru/zyspec)
  • errors related to static functions, so it works on PHP 5.4 (Mamba)
  • bug #1245 in class XoopsLoad.php (Alain91)

  • TinyMCE to 3.5.8 (mamba)
  • Smarty to 2.6.27 (mamba)
  • jQuery to 1.8.3 (mamba)
  • jQueryUI to version 1.10 (mamba)

  • Fast Comment Hack (Voltan)

Read more:

16 April 2012 - 38MB
21 November 2011 - 38MB
4 October 2011 - 36MB
3 October 2011 - 36MB
2 May 2011 - 34MB
9 April 2011 - 34MB
10 November 2010 - 34MB
12 July 2010 - 48MB
5 April 2010 - 48MB
16 March 2009 - 39MB
27 November 2005 - 8MB
20 August 2005 - 8MB
5 July 2005 - 8MB
10 May 2005 - 2MB
18 January 2005 - 2MB
27 September 2004 - 2MB
8 April 2004 - 2MB
8 April 2004 - 2MB

Our Web hostings are compatible with


Only the Web hosting

100% SSD Web Hosting
100 GB and +
Multi-site management
Advanced management of EV and DV SSL certificates
Anti-DDoS protection
10 GB of VOD

Learn more

from CHF 9.92 / month


The complete Web+Mail offer

100% SSD Web Hosting
100 GB and +
Multi-site management
Advanced management of EV and DV SSL certificates
Anti-DDoS protection
10 GB of VOD

Professional messaging
5 email addresses with unlimited storage

Online messaging
Instant messaging
Syncing contacts and calendars

Learn more

from CHF 12.00 / month

Cloud Server


100% SSD Web Hosting
100 GB and +
Multi-site management
Advanced management of EV and DV SSL certificates
Anti-DDoS protection
10 GB of VOD

2 CPU and +
6 Gb (RAM) and +
100% SSD
100% dedicated resources

Infomaniak manages your server

Learn more

from CHF 39.00 / month

Prices in CHF