r1945-ls255

CI Report:

https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls255/index.html

LinuxServer Changes:

Full Changelog: r1945-ls254...r1945-ls255

Remote Changes:

⚠️ IMPORTANT - READ BEFORE UPDATING

This is ProjectSend's biggest release to date with extensive changes to core systems.

Before updating: BACKUP, BACKUP, BACKUP!!!

Please ensure you have:

• ✅ Complete database backup
• ✅ Full file system backup (especially the upload folder)
• ✅ Copy of your sys.config.php file
• ✅ Verified your backups are restorable

Major changes include:

• Complete permissions system overhaul
• New encryption capabilities
• Database schema updates
• Authentication system changes

While we've tested extensively, backing up is critical. Don't skip this step!

---

ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628

---

Full changelog in https://projectsend.org/landing/changelog/r1945.php

⚠️ DO NOT MISS THE CHANGELOG! ⚠️

---

What's New in ProjectSend r1945

🔐 Security & Enterprise Features

• Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
• Advanced Permissions System: Complete overhaul with granular controls and custom role creation
• Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
• Security Fixes:
  • XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
  • Server software info escaping
  • Secure random string generation (found by hassan al-khafaji)
  • Prevention of unauthorized file previews

📁 File Management

• Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
• Disk Quota Management: Per-account storage limits with real-time usage tracking
• Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
• External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
• Batch File Encryption Tool: Encrypt multiple files at once
• Enhanced Folder System: Improved folder visibility for clients with better permission handling
  (contributions by Matani-Git)

🎨 Customization & UI

• 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
• Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
• Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
• Enhanced User Interface:
  • Unsaved changes warnings
  • Data preservation on validation failures
  • Light/dark mode toggle for admin pages
  • Improved form validation and required field indicators
  • Cards view for manage files with details sidebar

⚙️ System Improvements

• System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
• Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
• Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
• Remember Me Option: Persistent login sessions with configurable duration
• Favicon Customization: Upload custom favicon files
• Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
• Roles Manager: Complete role and permission management interface with custom role creation

🐛 Bug Fixes & Improvements

• Fixed session expiring with "Remember me" checked
• Fixed missing "Manage files" link with correct permissions
• Fixed SMTP authentication (by dawnstrider)
• Fixed username validation to allow underscores (by xia-stan)
• Fixed folder display issues for clients (by Matani-Git)
• Fixed 500 error when users upload files (by Matani-Git)
• Fixed actions log sorting (by rainyday4me)
• Fixed custom downloads table missing ID
• Fixed video preview functionality (by Nimon77)
• Fixed double X in close modal button (by rob4226)
• Fixed uploads folder .htaccess (by log4en)
• Fixed bad redirects (found by MGPhil)
• Fixed cronjob example (by ehawman)
• Registration bug fix (by bmartin13)
• Fixed deprecated dynamic property warnings (by raduhazsda)
• Fixed plupload styling for dark mode
• Preserve form data on errors
• Light mode set as default
• Added missing CSRF protections
• Fixed toggle styling

🔧 Technical Improvements

• PHPStan implementation with baseline (Co-authored by Claude)
• Updated dependencies: axios, @babel/traverse, follow-redirects
• GitHub Actions for security scanning and build status
• Composer validation fixes
• Support for environment variables in SMTP configuration (by redondi88)
• CodeMirror loaded from local lib (node_modules can be excluded)
• Auto-calculation of version numbers for releases
• Improved chunk size configuration (fixes #1203)
• Added results per page option to manage files

📦 Dependency Updates

• Updated CKEditor 5
• Bumped axios from 1.1.3 to 1.6.0
• Bumped follow-redirects from 1.15.2 to 1.15.6
• Bumped @babel/traverse from 7.18.13 to 7.23.2
• Updated various other dependencies for security and compatibility

🙏 Special Thanks

Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.

r1945-ls254

CI Report:

https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls254/index.html

LinuxServer Changes:

Full Changelog: r1945-ls253...r1945-ls254

Remote Changes:

⚠️ IMPORTANT - READ BEFORE UPDATING

This is ProjectSend's biggest release to date with extensive changes to core systems.

Before updating: BACKUP, BACKUP, BACKUP!!!

Please ensure you have:

• ✅ Complete database backup
• ✅ Full file system backup (especially the upload folder)
• ✅ Copy of your sys.config.php file
• ✅ Verified your backups are restorable

Major changes include:

• Complete permissions system overhaul
• New encryption capabilities
• Database schema updates
• Authentication system changes

While we've tested extensively, backing up is critical. Don't skip this step!

---

ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628

---

Full changelog in https://projectsend.org/landing/changelog/r1945.php

⚠️ DO NOT MISS THE CHANGELOG! ⚠️

---

What's New in ProjectSend r1945

🔐 Security & Enterprise Features

• Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
• Advanced Permissions System: Complete overhaul with granular controls and custom role creation
• Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
• Security Fixes:
  • XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
  • Server software info escaping
  • Secure random string generation (found by hassan al-khafaji)
  • Prevention of unauthorized file previews

📁 File Management

• Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
• Disk Quota Management: Per-account storage limits with real-time usage tracking
• Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
• External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
• Batch File Encryption Tool: Encrypt multiple files at once
• Enhanced Folder System: Improved folder visibility for clients with better permission handling
  (contributions by Matani-Git)

🎨 Customization & UI

• 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
• Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
• Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
• Enhanced User Interface:
  • Unsaved changes warnings
  • Data preservation on validation failures
  • Light/dark mode toggle for admin pages
  • Improved form validation and required field indicators
  • Cards view for manage files with details sidebar

⚙️ System Improvements

• System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
• Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
• Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
• Remember Me Option: Persistent login sessions with configurable duration
• Favicon Customization: Upload custom favicon files
• Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
• Roles Manager: Complete role and permission management interface with custom role creation

🐛 Bug Fixes & Improvements

• Fixed session expiring with "Remember me" checked
• Fixed missing "Manage files" link with correct permissions
• Fixed SMTP authentication (by dawnstrider)
• Fixed username validation to allow underscores (by xia-stan)
• Fixed folder display issues for clients (by Matani-Git)
• Fixed 500 error when users upload files (by Matani-Git)
• Fixed actions log sorting (by rainyday4me)
• Fixed custom downloads table missing ID
• Fixed video preview functionality (by Nimon77)
• Fixed double X in close modal button (by rob4226)
• Fixed uploads folder .htaccess (by log4en)
• Fixed bad redirects (found by MGPhil)
• Fixed cronjob example (by ehawman)
• Registration bug fix (by bmartin13)
• Fixed deprecated dynamic property warnings (by raduhazsda)
• Fixed plupload styling for dark mode
• Preserve form data on errors
• Light mode set as default
• Added missing CSRF protections
• Fixed toggle styling

🔧 Technical Improvements

• PHPStan implementation with baseline (Co-authored by Claude)
• Updated dependencies: axios, @babel/traverse, follow-redirects
• GitHub Actions for security scanning and build status
• Composer validation fixes
• Support for environment variables in SMTP configuration (by redondi88)
• CodeMirror loaded from local lib (node_modules can be excluded)
• Auto-calculation of version numbers for releases
• Improved chunk size configuration (fixes #1203)
• Added results per page option to manage files

📦 Dependency Updates

• Updated CKEditor 5
• Bumped axios from 1.1.3 to 1.6.0
• Bumped follow-redirects from 1.15.2 to 1.15.6
• Bumped @babel/traverse from 7.18.13 to 7.23.2
• Updated various other dependencies for security and compatibility

🙏 Special Thanks

Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.

r1945-ls253

CI Report:

https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls253/index.html

LinuxServer Changes:

• add php ldap module by @aptalca in #58

Full Changelog: r1945-ls252...r1945-ls253

Remote Changes:

⚠️ IMPORTANT - READ BEFORE UPDATING

This is ProjectSend's biggest release to date with extensive changes to core systems.

Before updating: BACKUP, BACKUP, BACKUP!!!

Please ensure you have:

• ✅ Complete database backup
• ✅ Full file system backup (especially the upload folder)
• ✅ Copy of your sys.config.php file
• ✅ Verified your backups are restorable

Major changes include:

• Complete permissions system overhaul
• New encryption capabilities
• Database schema updates
• Authentication system changes

While we've tested extensively, backing up is critical. Don't skip this step!

---

ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628

---

Full changelog in https://projectsend.org/landing/changelog/r1945.php

⚠️ DO NOT MISS THE CHANGELOG! ⚠️

---

What's New in ProjectSend r1945

🔐 Security & Enterprise Features

• Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
• Advanced Permissions System: Complete overhaul with granular controls and custom role creation
• Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
• Security Fixes:
  • XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
  • Server software info escaping
  • Secure random string generation (found by hassan al-khafaji)
  • Prevention of unauthorized file previews

📁 File Management

• Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
• Disk Quota Management: Per-account storage limits with real-time usage tracking
• Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
• External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
• Batch File Encryption Tool: Encrypt multiple files at once
• Enhanced Folder System: Improved folder visibility for clients with better permission handling
  (contributions by Matani-Git)

🎨 Customization & UI

• 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
• Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
• Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
• Enhanced User Interface:
  • Unsaved changes warnings
  • Data preservation on validation failures
  • Light/dark mode toggle for admin pages
  • Improved form validation and required field indicators
  • Cards view for manage files with details sidebar

⚙️ System Improvements

• System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
• Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
• Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
• Remember Me Option: Persistent login sessions with configurable duration
• Favicon Customization: Upload custom favicon files
• Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
• Roles Manager: Complete role and permission management interface with custom role creation

🐛 Bug Fixes & Improvements

• Fixed session expiring with "Remember me" checked
• Fixed missing "Manage files" link with correct permissions
• Fixed SMTP authentication (by dawnstrider)
• Fixed username validation to allow underscores (by xia-stan)
• Fixed folder display issues for clients (by Matani-Git)
• Fixed 500 error when users upload files (by Matani-Git)
• Fixed actions log sorting (by rainyday4me)
• Fixed custom downloads table missing ID
• Fixed video preview functionality (by Nimon77)
• Fixed double X in close modal button (by rob4226)
• Fixed uploads folder .htaccess (by log4en)
• Fixed bad redirects (found by MGPhil)
• Fixed cronjob example (by ehawman)
• Registration bug fix (by bmartin13)
• Fixed deprecated dynamic property warnings (by raduhazsda)
• Fixed plupload styling for dark mode
• Preserve form data on errors
• Light mode set as default
• Added missing CSRF protections
• Fixed toggle styling

🔧 Technical Improvements

• PHPStan implementation with baseline (Co-authored by Claude)
• Updated dependencies: axios, @babel/traverse, follow-redirects
• GitHub Actions for security scanning and build status
• Composer validation fixes
• Support for environment variables in SMTP configuration (by redondi88)
• CodeMirror loaded from local lib (node_modules can be excluded)
• Auto-calculation of version numbers for releases
• Improved chunk size configuration (fixes #1203)
• Added results per page option to manage files

📦 Dependency Updates

• Updated CKEditor 5
• Bumped axios from 1.1.3 to 1.6.0
• Bumped follow-redirects from 1.15.2 to 1.15.6
• Bumped @babel/traverse from 7.18.13 to 7.23.2
• Updated various other dependencies for security and compatibility

🙏 Special Thanks

Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.

r1945-ls252

CI Report:

https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls252/index.html

LinuxServer Changes:

Full Changelog: r1945-ls251...r1945-ls252

Remote Changes:

⚠️ IMPORTANT - READ BEFORE UPDATING

This is ProjectSend's biggest release to date with extensive changes to core systems.

Before updating: BACKUP, BACKUP, BACKUP!!!

Please ensure you have:

• ✅ Complete database backup
• ✅ Full file system backup (especially the upload folder)
• ✅ Copy of your sys.config.php file
• ✅ Verified your backups are restorable

Major changes include:

• Complete permissions system overhaul
• New encryption capabilities
• Database schema updates
• Authentication system changes

While we've tested extensively, backing up is critical. Don't skip this step!

---

ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628

---

Full changelog in https://projectsend.org/landing/changelog/r1945.php

⚠️ DO NOT MISS THE CHANGELOG! ⚠️

---

What's New in ProjectSend r1945

🔐 Security & Enterprise Features

• Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
• Advanced Permissions System: Complete overhaul with granular controls and custom role creation
• Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
• Security Fixes:
  • XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
  • Server software info escaping
  • Secure random string generation (found by hassan al-khafaji)
  • Prevention of unauthorized file previews

📁 File Management

• Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
• Disk Quota Management: Per-account storage limits with real-time usage tracking
• Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
• External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
• Batch File Encryption Tool: Encrypt multiple files at once
• Enhanced Folder System: Improved folder visibility for clients with better permission handling
  (contributions by Matani-Git)

🎨 Customization & UI

• 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
• Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
• Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
• Enhanced User Interface:
  • Unsaved changes warnings
  • Data preservation on validation failures
  • Light/dark mode toggle for admin pages
  • Improved form validation and required field indicators
  • Cards view for manage files with details sidebar

⚙️ System Improvements

• System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
• Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
• Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
• Remember Me Option: Persistent login sessions with configurable duration
• Favicon Customization: Upload custom favicon files
• Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
• Roles Manager: Complete role and permission management interface with custom role creation

🐛 Bug Fixes & Improvements

• Fixed session expiring with "Remember me" checked
• Fixed missing "Manage files" link with correct permissions
• Fixed SMTP authentication (by dawnstrider)
• Fixed username validation to allow underscores (by xia-stan)
• Fixed folder display issues for clients (by Matani-Git)
• Fixed 500 error when users upload files (by Matani-Git)
• Fixed actions log sorting (by rainyday4me)
• Fixed custom downloads table missing ID
• Fixed video preview functionality (by Nimon77)
• Fixed double X in close modal button (by rob4226)
• Fixed uploads folder .htaccess (by log4en)
• Fixed bad redirects (found by MGPhil)
• Fixed cronjob example (by ehawman)
• Registration bug fix (by bmartin13)
• Fixed deprecated dynamic property warnings (by raduhazsda)
• Fixed plupload styling for dark mode
• Preserve form data on errors
• Light mode set as default
• Added missing CSRF protections
• Fixed toggle styling

🔧 Technical Improvements

• PHPStan implementation with baseline (Co-authored by Claude)
• Updated dependencies: axios, @babel/traverse, follow-redirects
• GitHub Actions for security scanning and build status
• Composer validation fixes
• Support for environment variables in SMTP configuration (by redondi88)
• CodeMirror loaded from local lib (node_modules can be excluded)
• Auto-calculation of version numbers for releases
• Improved chunk size configuration (fixes #1203)
• Added results per page option to manage files

📦 Dependency Updates

• Updated CKEditor 5
• Bumped axios from 1.1.3 to 1.6.0
• Bumped follow-redirects from 1.15.2 to 1.15.6
• Bumped @babel/traverse from 7.18.13 to 7.23.2
• Updated various other dependencies for security and compatibility

🙏 Special Thanks

Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.

r1945-ls251

CI Report:

https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls251/index.html

LinuxServer Changes:

Full Changelog: r1945-ls250...r1945-ls251

Remote Changes:

⚠️ IMPORTANT - READ BEFORE UPDATING

This is ProjectSend's biggest release to date with extensive changes to core systems.

Before updating: BACKUP, BACKUP, BACKUP!!!

Please ensure you have:

• ✅ Complete database backup
• ✅ Full file system backup (especially the upload folder)
• ✅ Copy of your sys.config.php file
• ✅ Verified your backups are restorable

Major changes include:

• Complete permissions system overhaul
• New encryption capabilities
• Database schema updates
• Authentication system changes

While we've tested extensively, backing up is critical. Don't skip this step!

---

ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628

---

Full changelog in https://projectsend.org/landing/changelog/r1945.php

⚠️ DO NOT MISS THE CHANGELOG! ⚠️

---

What's New in ProjectSend r1945

🔐 Security & Enterprise Features

• Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
• Advanced Permissions System: Complete overhaul with granular controls and custom role creation
• Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
• Security Fixes:
  • XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
  • Server software info escaping
  • Secure random string generation (found by hassan al-khafaji)
  • Prevention of unauthorized file previews

📁 File Management

• Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
• Disk Quota Management: Per-account storage limits with real-time usage tracking
• Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
• External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
• Batch File Encryption Tool: Encrypt multiple files at once
• Enhanced Folder System: Improved folder visibility for clients with better permission handling
  (contributions by Matani-Git)

🎨 Customization & UI

• 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
• Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
• Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
• Enhanced User Interface:
  • Unsaved changes warnings
  • Data preservation on validation failures
  • Light/dark mode toggle for admin pages
  • Improved form validation and required field indicators
  • Cards view for manage files with details sidebar

⚙️ System Improvements

• System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
• Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
• Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
• Remember Me Option: Persistent login sessions with configurable duration
• Favicon Customization: Upload custom favicon files
• Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
• Roles Manager: Complete role and permission management interface with custom role creation

🐛 Bug Fixes & Improvements

• Fixed session expiring with "Remember me" checked
• Fixed missing "Manage files" link with correct permissions
• Fixed SMTP authentication (by dawnstrider)
• Fixed username validation to allow underscores (by xia-stan)
• Fixed folder display issues for clients (by Matani-Git)
• Fixed 500 error when users upload files (by Matani-Git)
• Fixed actions log sorting (by rainyday4me)
• Fixed custom downloads table missing ID
• Fixed video preview functionality (by Nimon77)
• Fixed double X in close modal button (by rob4226)
• Fixed uploads folder .htaccess (by log4en)
• Fixed bad redirects (found by MGPhil)
• Fixed cronjob example (by ehawman)
• Registration bug fix (by bmartin13)
• Fixed deprecated dynamic property warnings (by raduhazsda)
• Fixed plupload styling for dark mode
• Preserve form data on errors
• Light mode set as default
• Added missing CSRF protections
• Fixed toggle styling

🔧 Technical Improvements

• PHPStan implementation with baseline (Co-authored by Claude)
• Updated dependencies: axios, @babel/traverse, follow-redirects
• GitHub Actions for security scanning and build status
• Composer validation fixes
• Support for environment variables in SMTP configuration (by redondi88)
• CodeMirror loaded from local lib (node_modules can be excluded)
• Auto-calculation of version numbers for releases
• Improved chunk size configuration (fixes #1203)
• Added results per page option to manage files

📦 Dependency Updates

• Updated CKEditor 5
• Bumped axios from 1.1.3 to 1.6.0
• Bumped follow-redirects from 1.15.2 to 1.15.6
• Bumped @babel/traverse from 7.18.13 to 7.23.2
• Updated various other dependencies for security and compatibility

🙏 Special Thanks

Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.

r1945-ls250

CI Report:

https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls250/index.html

LinuxServer Changes:

Full Changelog: r1945-ls249...r1945-ls250

Remote Changes:

⚠️ IMPORTANT - READ BEFORE UPDATING

This is ProjectSend's biggest release to date with extensive changes to core systems.

Before updating: BACKUP, BACKUP, BACKUP!!!

Please ensure you have:

• ✅ Complete database backup
• ✅ Full file system backup (especially the upload folder)
• ✅ Copy of your sys.config.php file
• ✅ Verified your backups are restorable

Major changes include:

• Complete permissions system overhaul
• New encryption capabilities
• Database schema updates
• Authentication system changes

While we've tested extensively, backing up is critical. Don't skip this step!

---

ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628

---

Full changelog in https://projectsend.org/landing/changelog/r1945.php

⚠️ DO NOT MISS THE CHANGELOG! ⚠️

---

What's New in ProjectSend r1945

🔐 Security & Enterprise Features

• Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
• Advanced Permissions System: Complete overhaul with granular controls and custom role creation
• Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
• Security Fixes:
  • XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
  • Server software info escaping
  • Secure random string generation (found by hassan al-khafaji)
  • Prevention of unauthorized file previews

📁 File Management

• Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
• Disk Quota Management: Per-account storage limits with real-time usage tracking
• Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
• External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
• Batch File Encryption Tool: Encrypt multiple files at once
• Enhanced Folder System: Improved folder visibility for clients with better permission handling
  (contributions by Matani-Git)

🎨 Customization & UI

• 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
• Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
• Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
• Enhanced User Interface:
  • Unsaved changes warnings
  • Data preservation on validation failures
  • Light/dark mode toggle for admin pages
  • Improved form validation and required field indicators
  • Cards view for manage files with details sidebar

⚙️ System Improvements

• System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
• Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
• Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
• Remember Me Option: Persistent login sessions with configurable duration
• Favicon Customization: Upload custom favicon files
• Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
• Roles Manager: Complete role and permission management interface with custom role creation

🐛 Bug Fixes & Improvements

• Fixed session expiring with "Remember me" checked
• Fixed missing "Manage files" link with correct permissions
• Fixed SMTP authentication (by dawnstrider)
• Fixed username validation to allow underscores (by xia-stan)
• Fixed folder display issues for clients (by Matani-Git)
• Fixed 500 error when users upload files (by Matani-Git)
• Fixed actions log sorting (by rainyday4me)
• Fixed custom downloads table missing ID
• Fixed video preview functionality (by Nimon77)
• Fixed double X in close modal button (by rob4226)
• Fixed uploads folder .htaccess (by log4en)
• Fixed bad redirects (found by MGPhil)
• Fixed cronjob example (by ehawman)
• Registration bug fix (by bmartin13)
• Fixed deprecated dynamic property warnings (by raduhazsda)
• Fixed plupload styling for dark mode
• Preserve form data on errors
• Light mode set as default
• Added missing CSRF protections
• Fixed toggle styling

🔧 Technical Improvements

• PHPStan implementation with baseline (Co-authored by Claude)
• Updated dependencies: axios, @babel/traverse, follow-redirects
• GitHub Actions for security scanning and build status
• Composer validation fixes
• Support for environment variables in SMTP configuration (by redondi88)
• CodeMirror loaded from local lib (node_modules can be excluded)
• Auto-calculation of version numbers for releases
• Improved chunk size configuration (fixes #1203)
• Added results per page option to manage files

📦 Dependency Updates

• Updated CKEditor 5
• Bumped axios from 1.1.3 to 1.6.0
• Bumped follow-redirects from 1.15.2 to 1.15.6
• Bumped @babel/traverse from 7.18.13 to 7.23.2
• Updated various other dependencies for security and compatibility

🙏 Special Thanks

Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.

r1945-ls249

CI Report:

https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls249/index.html

LinuxServer Changes:

Full Changelog: r1945-ls248...r1945-ls249

Remote Changes:

⚠️ IMPORTANT - READ BEFORE UPDATING

This is ProjectSend's biggest release to date with extensive changes to core systems.

Before updating: BACKUP, BACKUP, BACKUP!!!

Please ensure you have:

• ✅ Complete database backup
• ✅ Full file system backup (especially the upload folder)
• ✅ Copy of your sys.config.php file
• ✅ Verified your backups are restorable

Major changes include:

• Complete permissions system overhaul
• New encryption capabilities
• Database schema updates
• Authentication system changes

While we've tested extensively, backing up is critical. Don't skip this step!

---

ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628

---

Full changelog in https://projectsend.org/landing/changelog/r1945.php

⚠️ DO NOT MISS THE CHANGELOG! ⚠️

---

What's New in ProjectSend r1945

🔐 Security & Enterprise Features

• Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
• Advanced Permissions System: Complete overhaul with granular controls and custom role creation
• Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
• Security Fixes:
  • XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
  • Server software info escaping
  • Secure random string generation (found by hassan al-khafaji)
  • Prevention of unauthorized file previews

📁 File Management

• Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
• Disk Quota Management: Per-account storage limits with real-time usage tracking
• Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
• External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
• Batch File Encryption Tool: Encrypt multiple files at once
• Enhanced Folder System: Improved folder visibility for clients with better permission handling
  (contributions by Matani-Git)

🎨 Customization & UI

• 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
• Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
• Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
• Enhanced User Interface:
  • Unsaved changes warnings
  • Data preservation on validation failures
  • Light/dark mode toggle for admin pages
  • Improved form validation and required field indicators
  • Cards view for manage files with details sidebar

⚙️ System Improvements

• System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
• Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
• Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
• Remember Me Option: Persistent login sessions with configurable duration
• Favicon Customization: Upload custom favicon files
• Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
• Roles Manager: Complete role and permission management interface with custom role creation

🐛 Bug Fixes & Improvements

• Fixed session expiring with "Remember me" checked
• Fixed missing "Manage files" link with correct permissions
• Fixed SMTP authentication (by dawnstrider)
• Fixed username validation to allow underscores (by xia-stan)
• Fixed folder display issues for clients (by Matani-Git)
• Fixed 500 error when users upload files (by Matani-Git)
• Fixed actions log sorting (by rainyday4me)
• Fixed custom downloads table missing ID
• Fixed video preview functionality (by Nimon77)
• Fixed double X in close modal button (by rob4226)
• Fixed uploads folder .htaccess (by log4en)
• Fixed bad redirects (found by MGPhil)
• Fixed cronjob example (by ehawman)
• Registration bug fix (by bmartin13)
• Fixed deprecated dynamic property warnings (by raduhazsda)
• Fixed plupload styling for dark mode
• Preserve form data on errors
• Light mode set as default
• Added missing CSRF protections
• Fixed toggle styling

🔧 Technical Improvements

• PHPStan implementation with baseline (Co-authored by Claude)
• Updated dependencies: axios, @babel/traverse, follow-redirects
• GitHub Actions for security scanning and build status
• Composer validation fixes
• Support for environment variables in SMTP configuration (by redondi88)
• CodeMirror loaded from local lib (node_modules can be excluded)
• Auto-calculation of version numbers for releases
• Improved chunk size configuration (fixes #1203)
• Added results per page option to manage files

📦 Dependency Updates

• Updated CKEditor 5
• Bumped axios from 1.1.3 to 1.6.0
• Bumped follow-redirects from 1.15.2 to 1.15.6
• Bumped @babel/traverse from 7.18.13 to 7.23.2
• Updated various other dependencies for security and compatibility

🙏 Special Thanks

Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.

r1945-ls248

CI Report:

https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls248/index.html

LinuxServer Changes:

• Add missing language files to default install by @thespad in #56

Full Changelog: r1945-ls247...r1945-ls248

Remote Changes:

⚠️ IMPORTANT - READ BEFORE UPDATING

This is ProjectSend's biggest release to date with extensive changes to core systems.

Before updating: BACKUP, BACKUP, BACKUP!!!

Please ensure you have:

• ✅ Complete database backup
• ✅ Full file system backup (especially the upload folder)
• ✅ Copy of your sys.config.php file
• ✅ Verified your backups are restorable

Major changes include:

• Complete permissions system overhaul
• New encryption capabilities
• Database schema updates
• Authentication system changes

While we've tested extensively, backing up is critical. Don't skip this step!

---

ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628

---

Full changelog in https://projectsend.org/landing/changelog/r1945.php

⚠️ DO NOT MISS THE CHANGELOG! ⚠️

---

What's New in ProjectSend r1945

🔐 Security & Enterprise Features

• Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
• Advanced Permissions System: Complete overhaul with granular controls and custom role creation
• Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
• Security Fixes:
  • XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
  • Server software info escaping
  • Secure random string generation (found by hassan al-khafaji)
  • Prevention of unauthorized file previews

📁 File Management

• Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
• Disk Quota Management: Per-account storage limits with real-time usage tracking
• Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
• External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
• Batch File Encryption Tool: Encrypt multiple files at once
• Enhanced Folder System: Improved folder visibility for clients with better permission handling
  (contributions by Matani-Git)

🎨 Customization & UI

• 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
• Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
• Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
• Enhanced User Interface:
  • Unsaved changes warnings
  • Data preservation on validation failures
  • Light/dark mode toggle for admin pages
  • Improved form validation and required field indicators
  • Cards view for manage files with details sidebar

⚙️ System Improvements

• System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
• Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
• Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
• Remember Me Option: Persistent login sessions with configurable duration
• Favicon Customization: Upload custom favicon files
• Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
• Roles Manager: Complete role and permission management interface with custom role creation

🐛 Bug Fixes & Improvements

• Fixed session expiring with "Remember me" checked
• Fixed missing "Manage files" link with correct permissions
• Fixed SMTP authentication (by dawnstrider)
• Fixed username validation to allow underscores (by xia-stan)
• Fixed folder display issues for clients (by Matani-Git)
• Fixed 500 error when users upload files (by Matani-Git)
• Fixed actions log sorting (by rainyday4me)
• Fixed custom downloads table missing ID
• Fixed video preview functionality (by Nimon77)
• Fixed double X in close modal button (by rob4226)
• Fixed uploads folder .htaccess (by log4en)
• Fixed bad redirects (found by MGPhil)
• Fixed cronjob example (by ehawman)
• Registration bug fix (by bmartin13)
• Fixed deprecated dynamic property warnings (by raduhazsda)
• Fixed plupload styling for dark mode
• Preserve form data on errors
• Light mode set as default
• Added missing CSRF protections
• Fixed toggle styling

🔧 Technical Improvements

• PHPStan implementation with baseline (Co-authored by Claude)
• Updated dependencies: axios, @babel/traverse, follow-redirects
• GitHub Actions for security scanning and build status
• Composer validation fixes
• Support for environment variables in SMTP configuration (by redondi88)
• CodeMirror loaded from local lib (node_modules can be excluded)
• Auto-calculation of version numbers for releases
• Improved chunk size configuration (fixes #1203)
• Added results per page option to manage files

📦 Dependency Updates

• Updated CKEditor 5
• Bumped axios from 1.1.3 to 1.6.0
• Bumped follow-redirects from 1.15.2 to 1.15.6
• Bumped @babel/traverse from 7.18.13 to 7.23.2
• Updated various other dependencies for security and compatibility

🙏 Special Thanks

Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.

r1945-ls247

CI Report:

https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls247/index.html

LinuxServer Changes:

Full Changelog: r1945-ls246...r1945-ls247

Remote Changes:

⚠️ IMPORTANT - READ BEFORE UPDATING

This is ProjectSend's biggest release to date with extensive changes to core systems.

Before updating: BACKUP, BACKUP, BACKUP!!!

Please ensure you have:

• ✅ Complete database backup
• ✅ Full file system backup (especially the upload folder)
• ✅ Copy of your sys.config.php file
• ✅ Verified your backups are restorable

Major changes include:

• Complete permissions system overhaul
• New encryption capabilities
• Database schema updates
• Authentication system changes

While we've tested extensively, backing up is critical. Don't skip this step!

---

ZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628

---

Full changelog in https://projectsend.org/landing/changelog/r1945.php

⚠️ DO NOT MISS THE CHANGELOG! ⚠️

---

What's New in ProjectSend r1945

🔐 Security & Enterprise Features

• Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage
• Advanced Permissions System: Complete overhaul with granular controls and custom role creation
• Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks
• Security Fixes:
  • XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)
  • Server software info escaping
  • Secure random string generation (found by hassan al-khafaji)
  • Prevention of unauthorized file previews

📁 File Management

• Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention
• Disk Quota Management: Per-account storage limits with real-time usage tracking
• Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization
• External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities
• Batch File Encryption Tool: Encrypt multiple files at once
• Enhanced Folder System: Improved folder visibility for clients with better permission handling
  (contributions by Matani-Git)

🎨 Customization & UI

• 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates
• Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables
• Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types
• Enhanced User Interface:
  • Unsaved changes warnings
  • Data preservation on validation failures
  • Light/dark mode toggle for admin pages
  • Improved form validation and required field indicators
  • Cards view for manage files with details sidebar

⚙️ System Improvements

• System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)
• Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support
• Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile
• Remember Me Option: Persistent login sessions with configurable duration
• Favicon Customization: Upload custom favicon files
• Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning
• Roles Manager: Complete role and permission management interface with custom role creation

🐛 Bug Fixes & Improvements

• Fixed session expiring with "Remember me" checked
• Fixed missing "Manage files" link with correct permissions
• Fixed SMTP authentication (by dawnstrider)
• Fixed username validation to allow underscores (by xia-stan)
• Fixed folder display issues for clients (by Matani-Git)
• Fixed 500 error when users upload files (by Matani-Git)
• Fixed actions log sorting (by rainyday4me)
• Fixed custom downloads table missing ID
• Fixed video preview functionality (by Nimon77)
• Fixed double X in close modal button (by rob4226)
• Fixed uploads folder .htaccess (by log4en)
• Fixed bad redirects (found by MGPhil)
• Fixed cronjob example (by ehawman)
• Registration bug fix (by bmartin13)
• Fixed deprecated dynamic property warnings (by raduhazsda)
• Fixed plupload styling for dark mode
• Preserve form data on errors
• Light mode set as default
• Added missing CSRF protections
• Fixed toggle styling

🔧 Technical Improvements

• PHPStan implementation with baseline (Co-authored by Claude)
• Updated dependencies: axios, @babel/traverse, follow-redirects
• GitHub Actions for security scanning and build status
• Composer validation fixes
• Support for environment variables in SMTP configuration (by redondi88)
• CodeMirror loaded from local lib (node_modules can be excluded)
• Auto-calculation of version numbers for releases
• Improved chunk size configuration (fixes #1203)
• Added results per page option to manage files

📦 Dependency Updates

• Updated CKEditor 5
• Bumped axios from 1.1.3 to 1.6.0
• Bumped follow-redirects from 1.15.2 to 1.15.6
• Bumped @babel/traverse from 7.18.13 to 7.23.2
• Updated various other dependencies for security and compatibility

🙏 Special Thanks

Special thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.

r1945-ls246

CI Report:

https://ci-tests.linuxserver.io/linuxserver/projectsend/r1945-ls246/index.html

LinuxServer Changes:

Remote Changes:

⚠️ IMPORTANT - READ BEFORE UPDATING\r\n\r\nThis is ProjectSend's biggest release to date with extensive changes to core systems.\r\n\r\nBefore updating: BACKUP, BACKUP, BACKUP!!!\r\n\r\nPlease ensure you have:\r\n- ✅ Complete database backup\r\n- ✅ Full file system backup (especially the upload folder)\r\n- ✅ Copy of your sys.config.php file\r\n- ✅ Verified your backups are restorable\r\n\r\nMajor changes include:\r\n- Complete permissions system overhaul\r\n- New encryption capabilities\r\n- Database schema updates\r\n- Authentication system changes\r\n\r\nWhile we've tested extensively, backing up is critical. Don't skip this step!\r\n\r\n---\r\n\r\nZIP file hash: 71a99f5d0bea0d12a5b8d8068e46947cd0ca2dc7124511af3231faf559f16628\r\n\r\n---\r\n\r\nFull changelog in https://projectsend.org/landing/changelog/r1945.php\r\n\r\n⚠️ DO NOT MISS THE CHANGELOG! ⚠️\r\n\r\n---\r\nWhat's New in ProjectSend r1945\r\n\r\n🔐 Security & Enterprise Features\r\n\r\n- Server-Side File Encryption: AES-256-GCM authenticated encryption for files at rest with support for cloud storage\r\n- Advanced Permissions System: Complete overhaul with granular controls and custom role creation\r\n- Enhanced LDAP/Active Directory: Improved enterprise authentication with dynamic role management and smart fallbacks\r\n- Security Fixes:\r\n - XSS vulnerability fixes in file editor and custom download aliases (reported by Raducu Alexandru-ionut)\r\n - Server software info escaping\r\n - Secure random string generation (found by hassan al-khafaji)\r\n - Prevention of unauthorized file previews\r\n\r\n📁 File Management\r\n\r\n- Download Limits: Set per-user or total download caps with automatic enforcement and abuse prevention\r\n- Disk Quota Management: Per-account storage limits with real-time usage tracking\r\n- Redesigned File Editor: Modern tabbed interface with bulk operations and mobile optimization\r\n- External Storage Integration: AWS S3 support with flexible upload destinations and file import capabilities\r\n- Batch File Encryption Tool: Encrypt multiple files at once\r\n- Enhanced Folder System: Improved folder visibility for clients with better permission handling\r\n(contributions by Matani-Git)\r\n\r\n🎨 Customization & UI\r\n\r\n- 9 New Themes: Expanded from 3 to 9 professional themes including Modern, Retro90s, Dark Cards, Business, and Google-like templates\r\n- Email Templates & Themes: Visual editor with CKEditor integration, multiple professional designs and dynamic variables\r\n- Custom Fields System: Add custom fields for users and clients with drag-and-drop ordering and multiple field types\r\n- Enhanced User Interface:\r\n - Unsaved changes warnings\r\n - Data preservation on validation failures\r\n - Light/dark mode toggle for admin pages\r\n - Improved form validation and required field indicators\r\n - Cards view for manage files with details sidebar\r\n\r\n⚙️ System Improvements\r\n\r\n- System Auto Update: Automatic updates with zero downtime and configurable channels (stable/beta)\r\n- Regenerate Thumbnails: Advanced thumbnail regeneration tool with filtering, custom dimensions, and date range support\r\n- Multiple CAPTCHA Methods: Choose from reCAPTCHA v2, v3, or Cloudflare Turnstile\r\n- Remember Me Option: Persistent login sessions with configurable duration\r\n- Favicon Customization: Upload custom favicon files\r\n- Dashboard Widgets: New download analytics and storage analytics widgets with drag-drop positioning\r\n- Roles Manager: Complete role and permission management interface with custom role creation\r\n\r\n🐛 Bug Fixes & Improvements\r\n\r\n- Fixed session expiring with "Remember me" checked\r\n- Fixed missing "Manage files" link with correct permissions\r\n- Fixed SMTP authentication (by dawnstrider)\r\n- Fixed username validation to allow underscores (by xia-stan)\r\n- Fixed folder display issues for clients (by Matani-Git)\r\n- Fixed 500 error when users upload files (by Matani-Git)\r\n- Fixed actions log sorting (by rainyday4me)\r\n- Fixed custom downloads table missing ID\r\n- Fixed video preview functionality (by Nimon77)\r\n- Fixed double X in close modal button (by rob4226)\r\n- Fixed uploads folder .htaccess (by log4en)\r\n- Fixed bad redirects (found by MGPhil)\r\n- Fixed cronjob example (by ehawman)\r\n- Registration bug fix (by bmartin13)\r\n- Fixed deprecated dynamic property warnings (by raduhazsda)\r\n- Fixed plupload styling for dark mode\r\n- Preserve form data on errors\r\n- Light mode set as default\r\n- Added missing CSRF protections\r\n- Fixed toggle styling\r\n\r\n🔧 Technical Improvements\r\n\r\n- PHPStan implementation with baseline (Co-authored by Claude)\r\n- Updated dependencies: axios, @babel/traverse, follow-redirects\r\n- GitHub Actions for security scanning and build status\r\n- Composer validation fixes\r\n- Support for environment variables in SMTP configuration (by redondi88)\r\n- CodeMirror loaded from local lib (node_modules can be excluded)\r\n- Auto-calculation of version numbers for releases\r\n- Improved chunk size configuration (fixes #1203)\r\n- Added results per page option to manage files\r\n\r\n📦 Dependency Updates\r\n\r\n- Updated CKEditor 5\r\n- Bumped axios from 1.1.3 to 1.6.0\r\n- Bumped follow-redirects from 1.15.2 to 1.15.6\r\n- Bumped @babel/traverse from 7.18.13 to 7.23.2\r\n- Updated various other dependencies for security and compatibility\r\n\r\n🙏 Special Thanks\r\n\r\nSpecial thanks to all contributors who helped make this release possible: dawnstrider, xia-stan, Matani-Git, rainyday4me, Nimon77, rob4226, log4en, MGPhil, ehawman, bmartin13, raduhazsda, redondi88, hassan al-khafaji, Raducu Alexandru-ionut, and all other community members who reported issues and provided feedback.