Lychee 5.0.2

5 January 2023

Lychee version 5.0.2 is now available (major release).

Upgrading to Lychee 5.0.2

What's New in Lychee 5.0.2

• GHSA-rjwv-5j3m-p5x4: Fix SQL Injection
  

• The public smart album has been removed. Pictures are no longer made public singular.
  

• improved honeypot logic & add more honey by @ildyria.
  
• map providers are now specified in an Enum by @ildyria.
  
• Add optimize database call by @ildyria.
  
• Drops support for singular public photos in search. by @ildyria.
  
• Bye bye PHP 8.1, long live PHP 8.2 by @ildyria.
  
• Add configuration check between int and positive (>0) by @ildyria.
  

• Shared albums: policy
  
• Allow other users to upload to shared albums
  
• Login on direct album url if not logged in and album needs it
  
• UI/UX: give more information about the capabilities given to new users in the users page
  
• Support for very large uploads by chunking
  
• Date/Time display options
  
• header text for the gallery
  
• Multiline descriptions with markdown support for images and albums
  
• Change album's Top Right menu behavior when selecting some pictures
  
• Access Rights management: Users and Albums
  
• Add real links to albums
  
• Change accent color
  
• Login popup appears if no albums created
  
• Add search / filter for 'Move' destination album list
  
• Album Delete Confirmation
  
• Rework Sharing Dialog in Settings
  
• Add album description between the header and the pictures
  
• Css is too complex to permit anyone to create new theme
  
• Make login dialog more prominent, auto-show login dialog if necessary, hide empty smart folders for anonymous users
  
• Diagnostics: Info are displayed in blue by @ildyria
  
• Add option for thumbs overlay: none|hidden|always by @ildyria
  

• Fixes hover (left-right) preventing clicks on volume etc buttons + fix frame button by @ildyria in #2116
  
• Fix #2118 - Fix drag upload bug by @maoxian-1 in #2119
  

• Add back blurred property by @ildyria in #2090
  
• Forgotten attribute of the canEdit function by @ildyria in #2091
  
• Fix 2095 : redirection not functioning on album creation. by @ildyria in #2101
  
• Better diagnostics for APP_URL and LYCHEE_UPLOAD_URL by @ildyria in #2105
  
• Fix unlock album component wrongly selected. by @ildyria in #2108
  
• Fix #2096 - Remove U2F from left menu when user is not allowed to modify their account. by @ildyria in #2107
  
• force https at the boot level instead of in the route files by @ildyria in #2110
  
• Remove path from query string via middleware by @mashb1t in #2112
  
• More checks for potential upload bugs by @ildyria in #2111
  
• Modify post-merge script to reflect 5.0.0 build changes by @TwizzyDizzy in #2109
  

• Delete existing user permissions associated by @ildyria.
  
• Adds missing space separator in Ghostbuster command advice by @HorlogeSkynet.
  
• Use proper URL instead of # fragments.
  
• a are now correct links/interactive
  
• Left menu is now working correctly
  
• When trying to open a password protected shared album, no password prompt is shown
  
• Photo Download not work - UnauthorizedException
  
• Insufficient privilieges when opening the "Share album" dialog as a regular user
  
• Album allow public upload but disallow deletion
  
• The CSS tweaks to disable auto zoom in/out no longer work #1973
  
• Internal server error on photo upload (permissions?)
  
• UX broken on version 4.7.0 for Safari iPhone
  
• Download button is visible and does not support download rights yet.
  
• Consistent URLs when Landing Page is disabled.
  
• Unable to open sidebar, can't navigate away from log/diagnostic/setting page
  
• Public album is not and can not be configured to be public #1053
  
• Depreciated dependencies cries for a new frontend. #199
  
• Album name not correct displayed in confirmation popup when moving a newly created album