π Changelog
π Version 3.x
- 3.2
- π€ More reliable resumable chunk uploads
- Added server-side offset validation and per-file locking to prevent duplicate chunks during retries
- Incomplete uploads are rejected before finalization instead of being moved or archived
- Improved cleanup of
.part,.meta,.lockand temporary.currentfiles after successful, cancelled or expired uploads
- π¦ Safer ZIP creation and finalization
- Upload completion is only reported after the ZIP process has finished successfully
- Added final checks to ensure the ZIP archive exists, is readable and is not empty before creating the download link
- ZIP and filesystem errors now return proper HTTP error responses and clean up temporary data
- Added free-space checks for both uploaded files and the final ZIP archive
- π Upload security improvements
- Added strict validation for upload IDs, relative paths, file sizes, file counts and upload modes
- Prevented directory traversal and invalid control characters in uploaded paths
- Added safer host and URL handling when generating download and verification links
- Escaped uploaded filenames in the browser to prevent HTML injection
- πΎ Safer metadata storage
- Added locked, atomic JSON updates to prevent concurrent upload requests from overwriting metadata
- Fixed an undefined cleanup-key issue when storing uploader and recipient addresses
- Improved metadata validation and error handling for save and cleanup requests
- π₯οΈ Improved browser upload handling
- HTTP and server errors are no longer hidden or displayed as successful uploads
- Upload controls are restored after an error so the upload can be retried without reloading the page
- Large drag-and-drop folders are now read completely, including directories containing more than 100 entries
- Folder paths and file metadata are preserved more reliably during drag-and-drop uploads
- π€ More reliable resumable chunk uploads
- 3.1
- πΌοΈ Favicon added
- π‘οΈ Privacy Policy and Disclaimer added
- Integrated a complete, multilingual Privacy Policy and Disclaimer (DE / EN / FR / IT)
- Clarifies operator responsibility for self-hosted installations
- Written in a neutral, instance-agnostic way
- π Legal text harmonization
- Aligned wording and structure across all languages
- Unified terminology and headings for consistency
- 3.0
- π€ New User Upload Mode (user_upload)
- Introduces an optional multi-user upload workflow. Users can upload files but have no access to admin functions
- When
user_uploadmode is enabled, the Admin Panel now displays which user uploaded each file in the upload list - Perfect for teams, client areas or project-based uploads
- Password protection, expiration times, link creation and download continue to work as usual
- π§© Admin Panel Extensions (User Management)
- Added a complete User Management module (create and delete users, reset user passwords)
- User accounts are stored in a dedicated JSON file inside the inc/ directory
- The admin accountβs username and password can also be changed
- π§© helpers.php improvements and extensions
- The default configuration is now automatically completed and merged with any missing keys when config.php is loaded
- Ensures older installations or partially modified config files always remain compatible with new features
- Prevents missing-key errors and keeps updates seamless
- π€ New User Upload Mode (user_upload)
π Version 2.x
- 2.9
- ποΈ Added a new βShow Download Pageβ toggle (
show_dp) in the configuration - π Lets you choose whether users see a download page (file info and download-button) or a direct file download after clicking the link
- π οΈ Fully integrated into the Admin Panel configuration and stored in the main
config.phpfile
- ποΈ Added a new βShow Download Pageβ toggle (
- 2.8
- π§ Added support for a separate SMTP FROM address (
SMTP_FROM_ADDRESS) so the visible sender can differ from the SMTP login (same domain required) - π οΈ Reworked SMTP sending to be RFC-compliant (adds
Date,Message-ID,MIME-Version, multiparttext/plain+text/html, UTF-8 encoded subject) for better compatibility with spam filters - π₯οΈ Admin Panel extended with a new field to configure the SMTP FROM address, which is stored in the
.envfile - ποΈ Improved Docker support for persistent configuration: the entire
incdirectory (including.env,.admin.json, config.php, translation files) can now be mounted from the host - πΎ Upload directory can now also be mounted externally via
DROPZONE_UPLOAD_DIR, making all uploaded files persistent and safe across container updates or reinstallation - π¦ When mounting an empty
incdirectory, Dropzone automatically initializes it with the default files from the image, ensuring a clean setup when the container is recreated - π This means both all settings (SMTP, admin login, configuration options) and all uploaded files are preserved even if the container is removed and recreated
- π§ Added support for a separate SMTP FROM address (
- 2.7
- π§ Added optional Admin email notifications for new uploads
- π Admin email address configuration directly in the Admin Panel
- βοΈ Added new toggle Admin Notify in configuration settings
- 2.6
- π Download tracking added (download counter + last download timestamp)
- ποΈ Display of βDownloadsβ and βLast Downloadβ directly in the Admin Panel
- 2.5
- βοΈ Improved Admin Panel with configuration and email settings
- π§ Clearer navigation and visual refinements in the Admin Panel
- π± Fully responsive redesign of the Admin Panel for mobile devices
- π Integrated search function for uploads
- 2.4
- βοΈ Added Admin Panel with password-protected setup
- π Manage Uploads (change expiration time, change password)
- π₯ Download Uploads directly from the Admin Panel
- π§Ή Delete Uploads directly from the Admin Panel
- 2.3
- π Security improvements
- ποΈ When the user manually cancels the upload, reloads the page, or closes the browser, temporary files are cleaned up and the entry is removed from the JSON file
- 2.2
- π Security improvements
- πΎ Check for sufficient disk space before upload (error message if too little free space)
- 2.1
- π§ The time period for which the file is valid is included in the email to the recipient
- 2.0
- π Completely reworked chunk upload
- β οΈ No more errors when uploading very large files
- π Other bug fixes
β¨ Version 1.x
- 1.9
- π New logo, colors and file list
- π± Responsive design for phones
- 1.8
- π§ Option to send files via email or just copy the download link
- 1.7
- π§ Share a unique download link directly to the recipientβs email inbox (multiple recipients supported)