ProjectSend r1295

11 January 2021

ProjectSend version r1295 is now available (major release).

Upgrading to ProjectSend r1295

What's New in ProjectSend r1295

• Added support for X-Accel on nginx
  
• Fixed password reset forms returning 403. By @varandinawer
  
• New option: select pagination amount for all administration areas
  
• Fixed pagination on default template. Solution by @mike-miguel
  
• Always check php, mysql and modules requirements to prevent the app from running on unsupported platforms
  
• Fixed: statistics chart for roles 7 and 8
  
• Default template: use global pagination amount
  
• Fixed missing uppercase characters on uploaded files
  
• Fixed typo on activities widget
  
• Added file size on public file download page
  
• Added file description colum on manage files page
  
• Don’t show the directories write permissions warning to clients
  
• Fix CVE-2020-28874 by @varandinawer
  
• Login: removed ajax functionality. Fixes infinite loading during errors. Fixes CVE-2020-28875 (found by @varandinawer)
  

• Fixed an issue with r1265 where the new columns where not being created on the actions log and user meta tables
  
• Fixed notices
  

• Added files preview for video, audio, PDF and images (in the Manage files page and the default template for clients)
  
• Added a page under Tools menu to test email configuration and new SSL options
  
• Multiple files can now be edited at the same time. This is the result of changing how uploads work. As soon as a file finishes uploading it is added to the database so it’s always available and easier to edit
  
• Added an option to download via XSendFile. This is a huge improvement for large downloads. While it requires a module to be installed on the server, the difference is outstanding. This module skips php when serving files, so that adds resumable downloads, faster speeds, and reduces significantly the chance of corrupt files
  
• When creating users and clients, you can require them to change the password after their first login
  
• Social login can now be enabled for Google, Facebook, Twitter, Linkedin, Windows Live, Yahoo
  
• Better zip download support. When downloading multiple files as zip, everything is recorded on the action log and downloads viewer.
  
• Added functions to download as zip on Pinboxes and Gallery templates.
  
• Implemented svg uploading as branding logo or regular shareable files. A sanitizer is added for security
  
• Flow of some actions have been improved, such as auto login when a client registers an account if auto approve is enabled
  
• Image files thumbnails are created and served with a new, much more reliable library
  
• Logged in users can change the language via a selector on the top right corner
  
• Many security fixes have been applied
  
• Dependencies are now handled via composer and npm, so it’s much easier to update them (phpmailer, plupload, bootstrap, chart.js, etc) and all assets are compiled via gulp. This leaves us with fewer, more compact and lighter requests and resource files
  
• Fixed installer issue where you would not be allowed to continue due to directory write errors, but the error was hidden
  
• New actions on the actions log
  
• Changed how news and updates are retrieved, eliminating the need for the simple_xml module
  
• New widget loads via ajax, so the dashboard is quicker to load and does not crash in case of errors
  
• Actions log widget: you can now select and view any available action instead of a few predetermined ones
  
• Lots of code refactoring to improve speed and resources usage
  
• Fixed and issue when updating assignations and several hundred users/groups were targeted and php would stop responding
  
• Fix: keep original filename special characters when downloading a file
  
• Improved the default email templates with a bigger font size and content width
  
• Show a warning if important directories don’t have write permissions
  
• Several small bug fixes
  
• Changed php version requirement to 7.1+