ProjectSend r1720
19 May 2025
ProjectSend version r1720 is now available (major release).
Upgrading to ProjectSend r1720
ProjectSend r1720 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply ProjectSend updates as new versions are released, or use Installatron's Clone feature to duplicate an existing ProjectSend install to test the r1720 upgrade prior to applying it live. Get started managing your ProjectSend installations with Installatron
What's New in ProjectSend r1720
Security
- Admin pages improvement: check user session before starting to process data
- Fixed insecure strings being generated by a simple random string function (found by hassan al-khafaji)
- Updated dependencies with known security issues (ie CKEditor5)
Bug Fixes and Changes
- Folders! Finally, the most requested feature is available. At the moment folders and subfolders can be created, rearranged by drag&drop and will be presented in all templates together with a breadcrumbs trail for easy navigation. There’s much to do yet (select multiple, make an entire folder public, etc) but this basic implementation should give a great starting point.
- Show image file dimensions (manage files, public page, download page, all templates)
- Added Option to show public files on clients files lists
- Added link to download translations to the languages dropdown
- Fixed php >8 warnings
- Allow underscores on usernames
- Fixed 2FA token not validating due to php and mysql time differences.
- Allow svg files as branding image
- Manage files: show file assigned categories
- Added option “Do not log downloads by the file’s uploader”
- Added an option to organize file uploads in year/month folders
- Add support for Env vars for SMTP Configuration (by redondi88, see variables here)
- add aliases or virtual links for uploaded files (by mhpcc)
- Fixed preview of video files (by Nimon77)
- Sanitize svg files uploaded in settings pages
- Include local version of jQuery on templates
- Do not load google’s recaptcha js asset if recaptcha is disabled
- Fix double “x” in close modal button (by rob4226)
- Fix: Extended remote_ip field on downloads table for long ipv6 addresses
- FIxed showing validation errors when creating a client/user fails
- Fix error 500 when self registering
- Fixed XSS when changing template
- fix upgrade failure when table prefix isn’t tbl_ (by mhpcc)
- Fixed getting links of previews by users with no access to the file (found by hassan al-khafaji and kiyell)