Releases: linuxserver/docker-projectsend
r1994-ls261
CI Report:
https://ci-tests.linuxserver.io/linuxserver/projectsend/r1994-ls261/index.html
LinuxServer Changes:
Full Changelog: r1945-ls260...r1994-ls261
Remote Changes:
ZIP file hash: f3236991f3e87ab714bc9dfc96e21666fdfae1472b0faf7f6024730bfcb218f9
Full changelog at https://projectsend.org/changelog/r1994.php
What's New in ProjectSend r1994
A stability-focused release with critical security patches, improved compatibility, and over 20 bug fixes addressing issues reported by the community since r1945.
🔐 Security
- Updated aws/aws-sdk-php to fix CVE-2025-14761
- Updated axios to fix CVE-2026-25639 (DoS via prototype pollution)
- Removed vulnerable babel-traverse (CVE-2023-45133) and gulp-babel (unused)
- Updated gulp to v5, fixing CVE-2024-4068 (braces) and CVE-2026-27903 (minimatch)
- Updated CKEditor to latest predefined build (44.3.0)
- Fix: do not allow encryption if encryption key is not present
- Fix file preview exposing direct file URL
🔧 Compatibility
- MySQL 5.7 support restored: Replaced MySQL 8.0-only recursive CTE with PHP-based parent folder traversal (#1498)
- HTTPS reverse proxy support: Detect HTTPS via X-Forwarded-Proto, X-Forwarded-SSL, and SERVER_PORT (#1524)
- Fresh install stability: Fixed crash when tbl_options doesn't exist (#1516) and migration 2022102701 failure with non-standard foreign key names
- Local S3-compatible storage: Extended Amazon S3 to support local instances like MinIO (#1495)
🐛 Bug Fixes
- Fix 403 error on first new client login with password change required (#1502, #1494)
- Fix client creation failing in r1945
- Fix permissions for existing roles not saving
- Fix "You cannot delete your own account" error
- Fix missing optional fields in Security settings
- Fix encrypted downloads returning scrambled data with X-Accel-Redirect
- Fix 'remember me' when using 2FA (#1519)
- Fix disk quota and max file size display inconsistency on clients list (#1506)
- Fix upload icon visible when uploads disabled in Business Professional, Drive, Dark Cards, and Gallery templates (#1517)
- Fix duplicate "new file" notifications sent when editing file properties (#1522)
- Fix template variables not parsed in custom email header/footer (#1490)
- Fix error counter and crash-safe error parsing in JS upload form
- Fix inconsistent error response format in upload process
- Fix setDefaults() called before filename_original is set during upload
- Fix event bindings duplicating on repeated form submissions
- Social login fix
- SMTP port default when not defined
- Fixes for issue #1525
⚡ Improvements
- Release session lock early during file uploads (performance improvement for multi-file uploads)
- Add default SMTP port selection on auth method change
- Upgrade Chart.js to version 4.5.0 (#1454)
- Updated translation files
🙏 Thanks
Thanks to all contributors: dino2gnt, maidis, TenBirk, krcgk, JazzMalar, Frmwrk-GmbH, sitecode, veenone, and everyone who reported issues.
r1945-ls260
CI Report:
https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls260/index.html
LinuxServer Changes:
Full Changelog: r1945-ls259...r1945-ls260
Remote Changes:
This is ProjectSend's biggest release to date with extensive changes to core systems.
Before updating: BACKUP, BACKUP, BACKUP!!!
Please ensure you have:
- ✅ Complete database backup
- ✅ Full file system backup (especially the upload folder)
- ✅ Copy of your sys.config.php file
- ✅ Verified your backups are restorable
Major changes include:
- Complete permissions system overhaul
- New encryption capabilities
- Database schema updates
- Authentication system changes
While we've tested extensively, backing up is critical. Don't skip this step!
ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628
Full changelog in https://projectsend.org/landing/changelog/r1945.php
What's New in ProjectSend r1945
🔐 Security & Enterprise Features
- Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
- Advanced Permissions System: Complete overhaul with granular controls and custom role creation
- Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
- Security Fixes:
- XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
- Server software info escaping
- Secure random string generation (found by hassan al-khafaji)
- Prevention of unauthorized file previews
📁 File Management
- Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
- Disk Quota Management: Per-account storage limits with real-time usage tracking
- Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
- External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
- Batch File Encryption Tool: Encrypt multiple files at once
- Enhanced Folder System: Improved folder visibility for clients with better permission handling
(contributions by Matani-Git)
🎨 Customization & UI
- 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
- Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
- Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
- Enhanced User Interface:
- Unsaved changes warnings
- Data preservation on validation failures
- Light/dark mode toggle for admin pages
- Improved form validation and required field indicators
- Cards view for manage files with details sidebar
⚙️ System Improvements
- System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
- Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
- Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
- Remember Me Option: Persistent login sessions with configurable duration
- Favicon Customization: Upload custom favicon files
- Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
- Roles Manager: Complete role and permission management interface with custom role creation
🐛 Bug Fixes & Improvements
- Fixed session expiring with "Remember me" checked
- Fixed missing "Manage files" link with correct permissions
- Fixed SMTP authentication (by dawnstrider)
- Fixed username validation to allow underscores (by xia-stan)
- Fixed folder display issues for clients (by Matani-Git)
- Fixed 500 error when users upload files (by Matani-Git)
- Fixed actions log sorting (by rainyday4me)
- Fixed custom downloads table missing ID
- Fixed video preview functionality (by Nimon77)
- Fixed double X in close modal button (by rob4226)
- Fixed uploads folder .htaccess (by log4en)
- Fixed bad redirects (found by MGPhil)
- Fixed cronjob example (by ehawman)
- Registration bug fix (by bmartin13)
- Fixed deprecated dynamic property warnings (by raduhazsda)
- Fixed plupload styling for dark mode
- Preserve form data on errors
- Light mode set as default
- Added missing CSRF protections
- Fixed toggle styling
🔧 Technical Improvements
- PHPStan implementation with baseline (Co-authored by Claude)
- Updated dependencies: axios, @babel/traverse, follow-redirects
- GitHub Actions for security scanning and build status
- Composer validation fixes
- Support for environment variables in SMTP configuration (by redondi88)
- CodeMirror loaded from local lib (node_modules can be excluded)
- Auto-calculation of version numbers for releases
- Improved chunk size configuration (fixes #1203)
- Added results per page option to manage files
📦 Dependency Updates
- Updated CKEditor 5
- Bumped axios from 1.1.3 to 1.6.0
- Bumped follow-redirects from 1.15.2 to 1.15.6
- Bumped @babel/traverse from 7.18.13 to 7.23.2
- Updated various other dependencies for security and compatibility
🙏 Special Thanks
Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.
r1945-ls259
CI Report:
https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls259/index.html
LinuxServer Changes:
Full Changelog: r1945-ls258...r1945-ls259
Remote Changes:
This is ProjectSend's biggest release to date with extensive changes to core systems.
Before updating: BACKUP, BACKUP, BACKUP!!!
Please ensure you have:
- ✅ Complete database backup
- ✅ Full file system backup (especially the upload folder)
- ✅ Copy of your sys.config.php file
- ✅ Verified your backups are restorable
Major changes include:
- Complete permissions system overhaul
- New encryption capabilities
- Database schema updates
- Authentication system changes
While we've tested extensively, backing up is critical. Don't skip this step!
ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628
Full changelog in https://projectsend.org/landing/changelog/r1945.php
What's New in ProjectSend r1945
🔐 Security & Enterprise Features
- Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
- Advanced Permissions System: Complete overhaul with granular controls and custom role creation
- Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
- Security Fixes:
- XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
- Server software info escaping
- Secure random string generation (found by hassan al-khafaji)
- Prevention of unauthorized file previews
📁 File Management
- Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
- Disk Quota Management: Per-account storage limits with real-time usage tracking
- Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
- External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
- Batch File Encryption Tool: Encrypt multiple files at once
- Enhanced Folder System: Improved folder visibility for clients with better permission handling
(contributions by Matani-Git)
🎨 Customization & UI
- 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
- Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
- Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
- Enhanced User Interface:
- Unsaved changes warnings
- Data preservation on validation failures
- Light/dark mode toggle for admin pages
- Improved form validation and required field indicators
- Cards view for manage files with details sidebar
⚙️ System Improvements
- System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
- Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
- Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
- Remember Me Option: Persistent login sessions with configurable duration
- Favicon Customization: Upload custom favicon files
- Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
- Roles Manager: Complete role and permission management interface with custom role creation
🐛 Bug Fixes & Improvements
- Fixed session expiring with "Remember me" checked
- Fixed missing "Manage files" link with correct permissions
- Fixed SMTP authentication (by dawnstrider)
- Fixed username validation to allow underscores (by xia-stan)
- Fixed folder display issues for clients (by Matani-Git)
- Fixed 500 error when users upload files (by Matani-Git)
- Fixed actions log sorting (by rainyday4me)
- Fixed custom downloads table missing ID
- Fixed video preview functionality (by Nimon77)
- Fixed double X in close modal button (by rob4226)
- Fixed uploads folder .htaccess (by log4en)
- Fixed bad redirects (found by MGPhil)
- Fixed cronjob example (by ehawman)
- Registration bug fix (by bmartin13)
- Fixed deprecated dynamic property warnings (by raduhazsda)
- Fixed plupload styling for dark mode
- Preserve form data on errors
- Light mode set as default
- Added missing CSRF protections
- Fixed toggle styling
🔧 Technical Improvements
- PHPStan implementation with baseline (Co-authored by Claude)
- Updated dependencies: axios, @babel/traverse, follow-redirects
- GitHub Actions for security scanning and build status
- Composer validation fixes
- Support for environment variables in SMTP configuration (by redondi88)
- CodeMirror loaded from local lib (node_modules can be excluded)
- Auto-calculation of version numbers for releases
- Improved chunk size configuration (fixes #1203)
- Added results per page option to manage files
📦 Dependency Updates
- Updated CKEditor 5
- Bumped axios from 1.1.3 to 1.6.0
- Bumped follow-redirects from 1.15.2 to 1.15.6
- Bumped @babel/traverse from 7.18.13 to 7.23.2
- Updated various other dependencies for security and compatibility
🙏 Special Thanks
Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.
r1945-ls258
CI Report:
https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls258/index.html
LinuxServer Changes:
Full Changelog: r1945-ls257...r1945-ls258
Remote Changes:
This is ProjectSend's biggest release to date with extensive changes to core systems.
Before updating: BACKUP, BACKUP, BACKUP!!!
Please ensure you have:
- ✅ Complete database backup
- ✅ Full file system backup (especially the upload folder)
- ✅ Copy of your sys.config.php file
- ✅ Verified your backups are restorable
Major changes include:
- Complete permissions system overhaul
- New encryption capabilities
- Database schema updates
- Authentication system changes
While we've tested extensively, backing up is critical. Don't skip this step!
ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628
Full changelog in https://projectsend.org/landing/changelog/r1945.php
What's New in ProjectSend r1945
🔐 Security & Enterprise Features
- Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
- Advanced Permissions System: Complete overhaul with granular controls and custom role creation
- Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
- Security Fixes:
- XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
- Server software info escaping
- Secure random string generation (found by hassan al-khafaji)
- Prevention of unauthorized file previews
📁 File Management
- Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
- Disk Quota Management: Per-account storage limits with real-time usage tracking
- Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
- External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
- Batch File Encryption Tool: Encrypt multiple files at once
- Enhanced Folder System: Improved folder visibility for clients with better permission handling
(contributions by Matani-Git)
🎨 Customization & UI
- 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
- Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
- Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
- Enhanced User Interface:
- Unsaved changes warnings
- Data preservation on validation failures
- Light/dark mode toggle for admin pages
- Improved form validation and required field indicators
- Cards view for manage files with details sidebar
⚙️ System Improvements
- System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
- Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
- Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
- Remember Me Option: Persistent login sessions with configurable duration
- Favicon Customization: Upload custom favicon files
- Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
- Roles Manager: Complete role and permission management interface with custom role creation
🐛 Bug Fixes & Improvements
- Fixed session expiring with "Remember me" checked
- Fixed missing "Manage files" link with correct permissions
- Fixed SMTP authentication (by dawnstrider)
- Fixed username validation to allow underscores (by xia-stan)
- Fixed folder display issues for clients (by Matani-Git)
- Fixed 500 error when users upload files (by Matani-Git)
- Fixed actions log sorting (by rainyday4me)
- Fixed custom downloads table missing ID
- Fixed video preview functionality (by Nimon77)
- Fixed double X in close modal button (by rob4226)
- Fixed uploads folder .htaccess (by log4en)
- Fixed bad redirects (found by MGPhil)
- Fixed cronjob example (by ehawman)
- Registration bug fix (by bmartin13)
- Fixed deprecated dynamic property warnings (by raduhazsda)
- Fixed plupload styling for dark mode
- Preserve form data on errors
- Light mode set as default
- Added missing CSRF protections
- Fixed toggle styling
🔧 Technical Improvements
- PHPStan implementation with baseline (Co-authored by Claude)
- Updated dependencies: axios, @babel/traverse, follow-redirects
- GitHub Actions for security scanning and build status
- Composer validation fixes
- Support for environment variables in SMTP configuration (by redondi88)
- CodeMirror loaded from local lib (node_modules can be excluded)
- Auto-calculation of version numbers for releases
- Improved chunk size configuration (fixes #1203)
- Added results per page option to manage files
📦 Dependency Updates
- Updated CKEditor 5
- Bumped axios from 1.1.3 to 1.6.0
- Bumped follow-redirects from 1.15.2 to 1.15.6
- Bumped @babel/traverse from 7.18.13 to 7.23.2
- Updated various other dependencies for security and compatibility
🙏 Special Thanks
Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.
r1945-ls257
CI Report:
https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls257/index.html
LinuxServer Changes:
Full Changelog: r1945-ls256...r1945-ls257
Remote Changes:
This is ProjectSend's biggest release to date with extensive changes to core systems.
Before updating: BACKUP, BACKUP, BACKUP!!!
Please ensure you have:
- ✅ Complete database backup
- ✅ Full file system backup (especially the upload folder)
- ✅ Copy of your sys.config.php file
- ✅ Verified your backups are restorable
Major changes include:
- Complete permissions system overhaul
- New encryption capabilities
- Database schema updates
- Authentication system changes
While we've tested extensively, backing up is critical. Don't skip this step!
ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628
Full changelog in https://projectsend.org/landing/changelog/r1945.php
What's New in ProjectSend r1945
🔐 Security & Enterprise Features
- Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
- Advanced Permissions System: Complete overhaul with granular controls and custom role creation
- Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
- Security Fixes:
- XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
- Server software info escaping
- Secure random string generation (found by hassan al-khafaji)
- Prevention of unauthorized file previews
📁 File Management
- Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
- Disk Quota Management: Per-account storage limits with real-time usage tracking
- Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
- External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
- Batch File Encryption Tool: Encrypt multiple files at once
- Enhanced Folder System: Improved folder visibility for clients with better permission handling
(contributions by Matani-Git)
🎨 Customization & UI
- 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
- Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
- Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
- Enhanced User Interface:
- Unsaved changes warnings
- Data preservation on validation failures
- Light/dark mode toggle for admin pages
- Improved form validation and required field indicators
- Cards view for manage files with details sidebar
⚙️ System Improvements
- System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
- Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
- Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
- Remember Me Option: Persistent login sessions with configurable duration
- Favicon Customization: Upload custom favicon files
- Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
- Roles Manager: Complete role and permission management interface with custom role creation
🐛 Bug Fixes & Improvements
- Fixed session expiring with "Remember me" checked
- Fixed missing "Manage files" link with correct permissions
- Fixed SMTP authentication (by dawnstrider)
- Fixed username validation to allow underscores (by xia-stan)
- Fixed folder display issues for clients (by Matani-Git)
- Fixed 500 error when users upload files (by Matani-Git)
- Fixed actions log sorting (by rainyday4me)
- Fixed custom downloads table missing ID
- Fixed video preview functionality (by Nimon77)
- Fixed double X in close modal button (by rob4226)
- Fixed uploads folder .htaccess (by log4en)
- Fixed bad redirects (found by MGPhil)
- Fixed cronjob example (by ehawman)
- Registration bug fix (by bmartin13)
- Fixed deprecated dynamic property warnings (by raduhazsda)
- Fixed plupload styling for dark mode
- Preserve form data on errors
- Light mode set as default
- Added missing CSRF protections
- Fixed toggle styling
🔧 Technical Improvements
- PHPStan implementation with baseline (Co-authored by Claude)
- Updated dependencies: axios, @babel/traverse, follow-redirects
- GitHub Actions for security scanning and build status
- Composer validation fixes
- Support for environment variables in SMTP configuration (by redondi88)
- CodeMirror loaded from local lib (node_modules can be excluded)
- Auto-calculation of version numbers for releases
- Improved chunk size configuration (fixes #1203)
- Added results per page option to manage files
📦 Dependency Updates
- Updated CKEditor 5
- Bumped axios from 1.1.3 to 1.6.0
- Bumped follow-redirects from 1.15.2 to 1.15.6
- Bumped @babel/traverse from 7.18.13 to 7.23.2
- Updated various other dependencies for security and compatibility
🙏 Special Thanks
Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.
r1945-ls256
CI Report:
https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls256/index.html
LinuxServer Changes:
Full Changelog: r1945-ls255...r1945-ls256
Remote Changes:
This is ProjectSend's biggest release to date with extensive changes to core systems.
Before updating: BACKUP, BACKUP, BACKUP!!!
Please ensure you have:
- ✅ Complete database backup
- ✅ Full file system backup (especially the upload folder)
- ✅ Copy of your sys.config.php file
- ✅ Verified your backups are restorable
Major changes include:
- Complete permissions system overhaul
- New encryption capabilities
- Database schema updates
- Authentication system changes
While we've tested extensively, backing up is critical. Don't skip this step!
ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628
Full changelog in https://projectsend.org/landing/changelog/r1945.php
What's New in ProjectSend r1945
🔐 Security & Enterprise Features
- Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
- Advanced Permissions System: Complete overhaul with granular controls and custom role creation
- Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
- Security Fixes:
- XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
- Server software info escaping
- Secure random string generation (found by hassan al-khafaji)
- Prevention of unauthorized file previews
📁 File Management
- Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
- Disk Quota Management: Per-account storage limits with real-time usage tracking
- Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
- External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
- Batch File Encryption Tool: Encrypt multiple files at once
- Enhanced Folder System: Improved folder visibility for clients with better permission handling
(contributions by Matani-Git)
🎨 Customization & UI
- 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
- Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
- Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
- Enhanced User Interface:
- Unsaved changes warnings
- Data preservation on validation failures
- Light/dark mode toggle for admin pages
- Improved form validation and required field indicators
- Cards view for manage files with details sidebar
⚙️ System Improvements
- System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
- Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
- Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
- Remember Me Option: Persistent login sessions with configurable duration
- Favicon Customization: Upload custom favicon files
- Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
- Roles Manager: Complete role and permission management interface with custom role creation
🐛 Bug Fixes & Improvements
- Fixed session expiring with "Remember me" checked
- Fixed missing "Manage files" link with correct permissions
- Fixed SMTP authentication (by dawnstrider)
- Fixed username validation to allow underscores (by xia-stan)
- Fixed folder display issues for clients (by Matani-Git)
- Fixed 500 error when users upload files (by Matani-Git)
- Fixed actions log sorting (by rainyday4me)
- Fixed custom downloads table missing ID
- Fixed video preview functionality (by Nimon77)
- Fixed double X in close modal button (by rob4226)
- Fixed uploads folder .htaccess (by log4en)
- Fixed bad redirects (found by MGPhil)
- Fixed cronjob example (by ehawman)
- Registration bug fix (by bmartin13)
- Fixed deprecated dynamic property warnings (by raduhazsda)
- Fixed plupload styling for dark mode
- Preserve form data on errors
- Light mode set as default
- Added missing CSRF protections
- Fixed toggle styling
🔧 Technical Improvements
- PHPStan implementation with baseline (Co-authored by Claude)
- Updated dependencies: axios, @babel/traverse, follow-redirects
- GitHub Actions for security scanning and build status
- Composer validation fixes
- Support for environment variables in SMTP configuration (by redondi88)
- CodeMirror loaded from local lib (node_modules can be excluded)
- Auto-calculation of version numbers for releases
- Improved chunk size configuration (fixes #1203)
- Added results per page option to manage files
📦 Dependency Updates
- Updated CKEditor 5
- Bumped axios from 1.1.3 to 1.6.0
- Bumped follow-redirects from 1.15.2 to 1.15.6
- Bumped @babel/traverse from 7.18.13 to 7.23.2
- Updated various other dependencies for security and compatibility
🙏 Special Thanks
Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.
r1945-ls255
CI Report:
https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls255/index.html
LinuxServer Changes:
Full Changelog: r1945-ls254...r1945-ls255
Remote Changes:
This is ProjectSend's biggest release to date with extensive changes to core systems.
Before updating: BACKUP, BACKUP, BACKUP!!!
Please ensure you have:
- ✅ Complete database backup
- ✅ Full file system backup (especially the upload folder)
- ✅ Copy of your sys.config.php file
- ✅ Verified your backups are restorable
Major changes include:
- Complete permissions system overhaul
- New encryption capabilities
- Database schema updates
- Authentication system changes
While we've tested extensively, backing up is critical. Don't skip this step!
ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628
Full changelog in https://projectsend.org/landing/changelog/r1945.php
What's New in ProjectSend r1945
🔐 Security & Enterprise Features
- Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
- Advanced Permissions System: Complete overhaul with granular controls and custom role creation
- Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
- Security Fixes:
- XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
- Server software info escaping
- Secure random string generation (found by hassan al-khafaji)
- Prevention of unauthorized file previews
📁 File Management
- Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
- Disk Quota Management: Per-account storage limits with real-time usage tracking
- Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
- External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
- Batch File Encryption Tool: Encrypt multiple files at once
- Enhanced Folder System: Improved folder visibility for clients with better permission handling
(contributions by Matani-Git)
🎨 Customization & UI
- 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
- Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
- Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
- Enhanced User Interface:
- Unsaved changes warnings
- Data preservation on validation failures
- Light/dark mode toggle for admin pages
- Improved form validation and required field indicators
- Cards view for manage files with details sidebar
⚙️ System Improvements
- System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
- Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
- Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
- Remember Me Option: Persistent login sessions with configurable duration
- Favicon Customization: Upload custom favicon files
- Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
- Roles Manager: Complete role and permission management interface with custom role creation
🐛 Bug Fixes & Improvements
- Fixed session expiring with "Remember me" checked
- Fixed missing "Manage files" link with correct permissions
- Fixed SMTP authentication (by dawnstrider)
- Fixed username validation to allow underscores (by xia-stan)
- Fixed folder display issues for clients (by Matani-Git)
- Fixed 500 error when users upload files (by Matani-Git)
- Fixed actions log sorting (by rainyday4me)
- Fixed custom downloads table missing ID
- Fixed video preview functionality (by Nimon77)
- Fixed double X in close modal button (by rob4226)
- Fixed uploads folder .htaccess (by log4en)
- Fixed bad redirects (found by MGPhil)
- Fixed cronjob example (by ehawman)
- Registration bug fix (by bmartin13)
- Fixed deprecated dynamic property warnings (by raduhazsda)
- Fixed plupload styling for dark mode
- Preserve form data on errors
- Light mode set as default
- Added missing CSRF protections
- Fixed toggle styling
🔧 Technical Improvements
- PHPStan implementation with baseline (Co-authored by Claude)
- Updated dependencies: axios, @babel/traverse, follow-redirects
- GitHub Actions for security scanning and build status
- Composer validation fixes
- Support for environment variables in SMTP configuration (by redondi88)
- CodeMirror loaded from local lib (node_modules can be excluded)
- Auto-calculation of version numbers for releases
- Improved chunk size configuration (fixes #1203)
- Added results per page option to manage files
📦 Dependency Updates
- Updated CKEditor 5
- Bumped axios from 1.1.3 to 1.6.0
- Bumped follow-redirects from 1.15.2 to 1.15.6
- Bumped @babel/traverse from 7.18.13 to 7.23.2
- Updated various other dependencies for security and compatibility
🙏 Special Thanks
Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.
r1945-ls254
CI Report:
https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls254/index.html
LinuxServer Changes:
Full Changelog: r1945-ls253...r1945-ls254
Remote Changes:
This is ProjectSend's biggest release to date with extensive changes to core systems.
Before updating: BACKUP, BACKUP, BACKUP!!!
Please ensure you have:
- ✅ Complete database backup
- ✅ Full file system backup (especially the upload folder)
- ✅ Copy of your sys.config.php file
- ✅ Verified your backups are restorable
Major changes include:
- Complete permissions system overhaul
- New encryption capabilities
- Database schema updates
- Authentication system changes
While we've tested extensively, backing up is critical. Don't skip this step!
ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628
Full changelog in https://projectsend.org/landing/changelog/r1945.php
What's New in ProjectSend r1945
🔐 Security & Enterprise Features
- Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
- Advanced Permissions System: Complete overhaul with granular controls and custom role creation
- Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
- Security Fixes:
- XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
- Server software info escaping
- Secure random string generation (found by hassan al-khafaji)
- Prevention of unauthorized file previews
📁 File Management
- Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
- Disk Quota Management: Per-account storage limits with real-time usage tracking
- Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
- External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
- Batch File Encryption Tool: Encrypt multiple files at once
- Enhanced Folder System: Improved folder visibility for clients with better permission handling
(contributions by Matani-Git)
🎨 Customization & UI
- 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
- Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
- Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
- Enhanced User Interface:
- Unsaved changes warnings
- Data preservation on validation failures
- Light/dark mode toggle for admin pages
- Improved form validation and required field indicators
- Cards view for manage files with details sidebar
⚙️ System Improvements
- System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
- Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
- Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
- Remember Me Option: Persistent login sessions with configurable duration
- Favicon Customization: Upload custom favicon files
- Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
- Roles Manager: Complete role and permission management interface with custom role creation
🐛 Bug Fixes & Improvements
- Fixed session expiring with "Remember me" checked
- Fixed missing "Manage files" link with correct permissions
- Fixed SMTP authentication (by dawnstrider)
- Fixed username validation to allow underscores (by xia-stan)
- Fixed folder display issues for clients (by Matani-Git)
- Fixed 500 error when users upload files (by Matani-Git)
- Fixed actions log sorting (by rainyday4me)
- Fixed custom downloads table missing ID
- Fixed video preview functionality (by Nimon77)
- Fixed double X in close modal button (by rob4226)
- Fixed uploads folder .htaccess (by log4en)
- Fixed bad redirects (found by MGPhil)
- Fixed cronjob example (by ehawman)
- Registration bug fix (by bmartin13)
- Fixed deprecated dynamic property warnings (by raduhazsda)
- Fixed plupload styling for dark mode
- Preserve form data on errors
- Light mode set as default
- Added missing CSRF protections
- Fixed toggle styling
🔧 Technical Improvements
- PHPStan implementation with baseline (Co-authored by Claude)
- Updated dependencies: axios, @babel/traverse, follow-redirects
- GitHub Actions for security scanning and build status
- Composer validation fixes
- Support for environment variables in SMTP configuration (by redondi88)
- CodeMirror loaded from local lib (node_modules can be excluded)
- Auto-calculation of version numbers for releases
- Improved chunk size configuration (fixes #1203)
- Added results per page option to manage files
📦 Dependency Updates
- Updated CKEditor 5
- Bumped axios from 1.1.3 to 1.6.0
- Bumped follow-redirects from 1.15.2 to 1.15.6
- Bumped @babel/traverse from 7.18.13 to 7.23.2
- Updated various other dependencies for security and compatibility
🙏 Special Thanks
Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.
r1945-ls253
CI Report:
https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls253/index.html
LinuxServer Changes:
Full Changelog: r1945-ls252...r1945-ls253
Remote Changes:
This is ProjectSend's biggest release to date with extensive changes to core systems.
Before updating: BACKUP, BACKUP, BACKUP!!!
Please ensure you have:
- ✅ Complete database backup
- ✅ Full file system backup (especially the upload folder)
- ✅ Copy of your sys.config.php file
- ✅ Verified your backups are restorable
Major changes include:
- Complete permissions system overhaul
- New encryption capabilities
- Database schema updates
- Authentication system changes
While we've tested extensively, backing up is critical. Don't skip this step!
ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628
Full changelog in https://projectsend.org/landing/changelog/r1945.php
What's New in ProjectSend r1945
🔐 Security & Enterprise Features
- Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
- Advanced Permissions System: Complete overhaul with granular controls and custom role creation
- Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
- Security Fixes:
- XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
- Server software info escaping
- Secure random string generation (found by hassan al-khafaji)
- Prevention of unauthorized file previews
📁 File Management
- Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
- Disk Quota Management: Per-account storage limits with real-time usage tracking
- Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
- External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
- Batch File Encryption Tool: Encrypt multiple files at once
- Enhanced Folder System: Improved folder visibility for clients with better permission handling
(contributions by Matani-Git)
🎨 Customization & UI
- 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
- Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
- Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
- Enhanced User Interface:
- Unsaved changes warnings
- Data preservation on validation failures
- Light/dark mode toggle for admin pages
- Improved form validation and required field indicators
- Cards view for manage files with details sidebar
⚙️ System Improvements
- System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
- Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
- Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
- Remember Me Option: Persistent login sessions with configurable duration
- Favicon Customization: Upload custom favicon files
- Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
- Roles Manager: Complete role and permission management interface with custom role creation
🐛 Bug Fixes & Improvements
- Fixed session expiring with "Remember me" checked
- Fixed missing "Manage files" link with correct permissions
- Fixed SMTP authentication (by dawnstrider)
- Fixed username validation to allow underscores (by xia-stan)
- Fixed folder display issues for clients (by Matani-Git)
- Fixed 500 error when users upload files (by Matani-Git)
- Fixed actions log sorting (by rainyday4me)
- Fixed custom downloads table missing ID
- Fixed video preview functionality (by Nimon77)
- Fixed double X in close modal button (by rob4226)
- Fixed uploads folder .htaccess (by log4en)
- Fixed bad redirects (found by MGPhil)
- Fixed cronjob example (by ehawman)
- Registration bug fix (by bmartin13)
- Fixed deprecated dynamic property warnings (by raduhazsda)
- Fixed plupload styling for dark mode
- Preserve form data on errors
- Light mode set as default
- Added missing CSRF protections
- Fixed toggle styling
🔧 Technical Improvements
- PHPStan implementation with baseline (Co-authored by Claude)
- Updated dependencies: axios, @babel/traverse, follow-redirects
- GitHub Actions for security scanning and build status
- Composer validation fixes
- Support for environment variables in SMTP configuration (by redondi88)
- CodeMirror loaded from local lib (node_modules can be excluded)
- Auto-calculation of version numbers for releases
- Improved chunk size configuration (fixes #1203)
- Added results per page option to manage files
📦 Dependency Updates
- Updated CKEditor 5
- Bumped axios from 1.1.3 to 1.6.0
- Bumped follow-redirects from 1.15.2 to 1.15.6
- Bumped @babel/traverse from 7.18.13 to 7.23.2
- Updated various other dependencies for security and compatibility
🙏 Special Thanks
Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.
r1945-ls252
CI Report:
https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls252/index.html
LinuxServer Changes:
Full Changelog: r1945-ls251...r1945-ls252
Remote Changes:
This is ProjectSend's biggest release to date with extensive changes to core systems.
Before updating: BACKUP, BACKUP, BACKUP!!!
Please ensure you have:
- ✅ Complete database backup
- ✅ Full file system backup (especially the upload folder)
- ✅ Copy of your sys.config.php file
- ✅ Verified your backups are restorable
Major changes include:
- Complete permissions system overhaul
- New encryption capabilities
- Database schema updates
- Authentication system changes
While we've tested extensively, backing up is critical. Don't skip this step!
ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628
Full changelog in https://projectsend.org/landing/changelog/r1945.php
What's New in ProjectSend r1945
🔐 Security & Enterprise Features
- Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
- Advanced Permissions System: Complete overhaul with granular controls and custom role creation
- Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
- Security Fixes:
- XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
- Server software info escaping
- Secure random string generation (found by hassan al-khafaji)
- Prevention of unauthorized file previews
📁 File Management
- Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
- Disk Quota Management: Per-account storage limits with real-time usage tracking
- Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
- External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
- Batch File Encryption Tool: Encrypt multiple files at once
- Enhanced Folder System: Improved folder visibility for clients with better permission handling
(contributions by Matani-Git)
🎨 Customization & UI
- 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
- Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
- Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
- Enhanced User Interface:
- Unsaved changes warnings
- Data preservation on validation failures
- Light/dark mode toggle for admin pages
- Improved form validation and required field indicators
- Cards view for manage files with details sidebar
⚙️ System Improvements
- System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
- Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
- Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
- Remember Me Option: Persistent login sessions with configurable duration
- Favicon Customization: Upload custom favicon files
- Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
- Roles Manager: Complete role and permission management interface with custom role creation
🐛 Bug Fixes & Improvements
- Fixed session expiring with "Remember me" checked
- Fixed missing "Manage files" link with correct permissions
- Fixed SMTP authentication (by dawnstrider)
- Fixed username validation to allow underscores (by xia-stan)
- Fixed folder display issues for clients (by Matani-Git)
- Fixed 500 error when users upload files (by Matani-Git)
- Fixed actions log sorting (by rainyday4me)
- Fixed custom downloads table missing ID
- Fixed video preview functionality (by Nimon77)
- Fixed double X in close modal button (by rob4226)
- Fixed uploads folder .htaccess (by log4en)
- Fixed bad redirects (found by MGPhil)
- Fixed cronjob example (by ehawman)
- Registration bug fix (by bmartin13)
- Fixed deprecated dynamic property warnings (by raduhazsda)
- Fixed plupload styling for dark mode
- Preserve form data on errors
- Light mode set as default
- Added missing CSRF protections
- Fixed toggle styling
🔧 Technical Improvements
- PHPStan implementation with baseline (Co-authored by Claude)
- Updated dependencies: axios, @babel/traverse, follow-redirects
- GitHub Actions for security scanning and build status
- Composer validation fixes
- Support for environment variables in SMTP configuration (by redondi88)
- CodeMirror loaded from local lib (node_modules can be excluded)
- Auto-calculation of version numbers for releases
- Improved chunk size configuration (fixes #1203)
- Added results per page option to manage files
📦 Dependency Updates
- Updated CKEditor 5
- Bumped axios from 1.1.3 to 1.6.0
- Bumped follow-redirects from 1.15.2 to 1.15.6
- Bumped @babel/traverse from 7.18.13 to 7.23.2
- Updated various other dependencies for security and compatibility
🙏 Special Thanks
Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.