Current File : //var/softaculous/cftp/changelog.txt
Version: ProjectSend r1420
Date released: May 28, 2022
Fixed deleting files as admin
Fixed deleting files from the database when they don't exist on the disk
Added filtering files by assigned/not assigned
Version: ProjectSend r1415
Date released: May 26, 2022
New feature: throttle and ban failed log in attempts to prevent brute force attacks.
New in security Settings: whitelist or blacklist IPs from the log in ban feature.
New in Tools: unblock a banned IP address
New feature: cron jobs. Set up a task that can send pending email notifications in batches, deletes expired files and orphan files.
New Cron settings page: Enable/disable cron, change cron security key, select which tasks to run, enable or disable running via url, save log to database, send results via email.
New in Tools: Cron log viewer
Orphan files can now be filtered by allowed/not allowed.
If Recaptcha is enabled, use it on login, password reset request and register forms
New setting: disable sending email notifications of new files after adding/editing assignations. Enable this and combine it with a cron task to prevent long loading times after saving a file and overloading your mail server.
Updates are now separated into different files, with the latest database update number being independent from the software version. Cleans up the process and makes adding new updates easier.
Fixed installer issues (redirect loops and old sessions)
Fix: Category edit: verify parent id is not equal to same category id (by luca-rigutti)
While installing, get default timezone from system
Added max-width to the logo image on the gallery template.
Enable or disable debug from the custom config file, instead of using a core file
Fixed translations not loading and warnings on php 8+
Enable csv uploading by default
Use curl -if available- to get new versions and news data, enables timeout to prevent long loading times
Fixed: dashboard counters labels where not translatable
When editing a user, if role is not client, some fields should be always null (phone, contact, address)
Fixed XSS vulnerability on search forms
Fixed .htaccess (by RoboDoc)
Batch actions are sent as post instead of get to prevent malicious users from sending an action url to an admin user
Updated dependencies
Prevent registering via POST if self registration is disabled
Fixed Title TAG instead of file name (by deklica)
Spellchecking + Changed all instances of "his" to "their" when referencing an unknown individual (by ehawman-rosenberg)
Fixed JSON responses on widgets (by RiversideRocks)
Version: ProjectSend r1335
Date released: December 8, 2021
Improved php 8 compatibility by fixing the PDOEx query method (when DEBUG is set to true)
Fixed installer missing a database column
Fixed manage files and downloads when shell_exec is not enabled. which resulted in wrong file sizes
Version: r1330
Date released: November 30, 2021
Clients can now make files public according to a new setting (all clients, none, or manually allowed ones)
Implemented resumable downloads via php file serving (by jesbrand)
Fixed issues when updating due to invalid MySQL date values (by guitoulefoux)
Fixed directory traversal security issue (by (Thrun12)
Fixed all known XSS vulnerabilities
Fixed a security issue due to files IDs not being type validated (by ranjit-git)
Fixed file wrong file names in certain downloads (by guitoulefoux)
Fixed wrong migrations on users and files relations tables (by guitoulefoux)
Replaced invalid characters on file names when downloading the files
Fixed download of files with special characters (by PC-COLLEGE-Training)
Added Microsoft Graph OAuth2 support (by Seros)
Added IIS Compatibility (by Trapulo)
Updated dependencies
Added Security policy (by zidingz)
Fixed X-Accel downloads (by alexey001)
Fixed rejection of files with uppercase extensions while trying to upload
Prevented more file types from executing from the uploads directory
Fixed file name not showing in manage files after renaming (by cesarcorrea)
Fixed plupload translation not loading (by jensbrand)
Improved compatibility with newer versions of php
Fixed and issue that returned a 500 error on the Manage Files page
Version: r1295
Date released: November 19, 2020
Added support for X-Accel on nginx
Fixed password reset forms returning 403. By @varandinawer
New option: select pagination amount for all administration areas
Fixed pagination on default template. Solution by @mike-miguel
Always check php, mysql and modules requirements to prevent the app from running on unsupported platforms
Fixed: statistics chart for roles 7 and 8
Default template: use global pagination amount
Fixed missing uppercase characters on uploaded files
Fixed typo on activities widget
Added file size on public file download page
Added file description colum on manage files page
Don’t show the directories write permissions warning to clients
Fix CVE-2020-28874 by @varandinawer
Login: removed ajax functionality. Fixes infinite loading during errors. Fixes CVE-2020-28875 (found by @varandinawer)
Mini Shell