Area: Forums (audit p2) · Surface: POST /forums/{slug}/flair (ForumController@setUserFlair); UI: "My Flair" button + modal in platform/templates/forums/_action-bar.php · Dimension: documentation · Severity: minor
Members can set a custom text+color flair shown beside their username per forum, but no wiki article documents how to set it, the 30-char limit, the available colors, or the staff-impersonation restriction. The word "flair" only appears in the wiki referring to the unrelated thread-composer flair tag and the server-boost "booster flair" perk, which will mislead users searching for how to set their personal forum flair.
Evidence
Code proves it is a self-service member feature: platform/templates/forums/_action-bar.php:91-128 renders a "My Flair" modal — `<form action="/forums/<?= $e($forum['slug']) ?>/flair" method="POST">` with a `flair_text` input (30 char max) and an 8-color `flair_color` select (Blue/Orange/Sky blue/Pink/Gold/Purple/White/Green); the modal text reads "A short tag that appears next to your username in this forum." Handler ForumController.php:setUserFlair validates the color allow-list and blocks staff-impersonating text. Wiki check: `grep -c 'href="/know/flair"' /tmp/know_index.html` = 0 (also user-flair=0, forum-flair=0). Index body text contains the word "flair" 0 times (python strip-tags scan). Across all 71 downloaded /know articles, the only "flair" mentions are unrelated: forums-and-discussions = thread composer flair tag, server-boosts/mobieus-products = "booster flair" perk. https://support.mobieus.io/know/search?q=flair returns "No results".
Suggested fix. Add a mobieusKnow article (e.g. /know/forum-flair) covering: opening "My Flair" from a forum action bar, entering flair text (30 char max), choosing a color, removing flair (blank text), and the rule that staff-role words (admin, mod, staff, owner, etc.) are blocked. Cross-link it from forums-and-discussions and trust-levels-and-roles.
Filed by the automated tenant-app audit and adversarially evidence-verified. Status: verified. Open — not yet actioned.
Patrick Bass
@mobieus