Area: Forums (re-run) (audit p2r) · Surface: GET/POST /forums/{slug}/invite, GET /forums/{slug}/members, GET /forums/{slug}/members/pending (ForumMembershipController@inviteForm/invite/members/pending) · Dimension: documentation · Severity: major
Forum owners/mods can invite specific users to a forum, see the member list, and review pending requests, but there is no wiki article explaining the forum-membership model (invite vs. request, accepting/declining, revoking). The existing invite-system article is about tenant-level registration codes and will mislead users searching for forum invites.
Evidence
The only invite article on the live wiki documents PLATFORM-wide invite codes, not forum membership. Live body of https://support.mobieus.io/know/invite-system: "Invite System When registration is set to invite-only ... Access at /admin/invites . Generate codes ... Share the code or invite link ( /invite/{code} )" — no mention of forum membership. Live search https://support.mobieus.io/know/search?q=sub-moderator and ?q=request%20to%20join both return "No results". Feature is real and user-surfaced: templates/forums/_action-bar.php:63 `<a href="/forums/<?= $e($forum['slug']) ?>/members" ... > Members & Invitations</a>`; ForumMembershipController.php:15 `public function invite(string $slug)`, :412 `members()`, :431 `pending()`, :452 `inviteForm()`; templates exist: templates/forums/invite.php, members.php, pending.php. None of the 6 forum articles' bodies (forum-administration, forums-and-discussions, thread-features, moderation, content-moderation, modmail) contain 'invite'/'invitation'/'membership'.
Suggested fix. Add a 'Forum Membership & Invitations' article covering inviteForm/invite/accept/decline/revoke, the members and pending pages, and how it differs from platform invite codes. Cross-link from invite-system and forums-and-discussions.
Filed by the automated tenant-app audit and adversarially evidence-verified. Status: verified. Open — not yet actioned.
Patrick Bass
@mobieus