Detect XenForo
XenForo is a PHP-based forum hosting program for communities that is designed to be deployed on a remote web server.
Detection looks at cookies, javascript globals, dom selectors, html markup across 6 fingerprint rules among the site's public responses.
01
Websites using XenForo
Loading website list…
02
Signal classes
PluginView evaluates public page signals in these classes when identifying XenForo. Individual fingerprint rule bodies are proprietary and are not published.
- Cookies
- JavaScript globals
- DOM selectors
- HTML markup
03
Example public indicators for XenForo
Illustrative indicators derived from public catalog metadata for XenForo. A live scan may match additional proprietary rules beyond these examples.
- xf_csrf
- xf_session
- XF.GuestUsername
- html, html
- jQuery.extendtrue, XenForo<a>Forum software by XenForo™<!--XF:branding<…
- <html id="XF"
04
What a detection means
- Establishes
- One or more public signals on the scanned page matched a known XenForo signature (6 rules) at the time of the scan.
- Does not establish
- A sitewide install of XenForo, an active vendor contract, exclusive use, or that XenForo is still in place today.
05
How to check a site for XenForo
- 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest XenForo signals.
- 2. PluginView reads only public responses (cookies, javascript globals, dom selectors) and scores them against the XenForo signature set (6 rules).
- 3. Review the confidence score and text explanation for XenForo on the results page.
06
Commonly implies
07
FAQ: detecting XenForo
- Can PluginView detect XenForo without logging in?
- Yes. PluginView only reads publicly accessible responses when checking for XenForo — typically cookies, javascript globals, dom selectors, html markup. It does not bypass authentication or paywalls.
- What category is XenForo?
- XenForo is classified under Message boards in the PluginView directory.
- How many fingerprint rules cover XenForo?
- This reference currently tracks 6 fingerprint rules across cookies, javascript globals, dom selectors, html markup. Individual rule bodies are proprietary and are not published.
- What public signals suggest a site uses XenForo?
- Illustrative public indicators for XenForo include xf_csrf; xf_session; XF.GuestUsername. A live scan may match additional proprietary rules beyond these examples.
