You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
🔄 Changelog
🆕 Version 3.x
3.2
📤 More reliable resumable chunk uploads
Added server-side offset validation and per-file locking to prevent duplicate chunks during retries
Incomplete uploads are rejected before finalization instead of being moved or archived
Improved cleanup of .part, .meta, .lock and temporary .current files after successful, cancelled or expired uploads
📦 Safer ZIP creation and finalization
Upload completion is only reported after the ZIP process has finished successfully
Added final checks to ensure the ZIP archive exists, is readable and is not empty before creating the download link
ZIP and filesystem errors now return proper HTTP error responses and clean up temporary data
Added free-space checks for both uploaded files and the final ZIP archive
🔒 Upload security improvements
Added strict validation for upload IDs, relative paths, file sizes, file counts and upload modes
Prevented directory traversal and invalid control characters in uploaded paths
Added safer host and URL handling when generating download and verification links
Escaped uploaded filenames in the browser to prevent HTML injection
💾 Safer metadata storage
Added locked, atomic JSON updates to prevent concurrent upload requests from overwriting metadata
Fixed an undefined cleanup-key issue when storing uploader and recipient addresses
Improved metadata validation and error handling for save and cleanup requests
🖥️ Improved browser upload handling
HTTP and server errors are no longer hidden or displayed as successful uploads
Upload controls are restored after an error so the upload can be retried without reloading the page
Large drag-and-drop folders are now read completely, including directories containing more than 100 entries
Folder paths and file metadata are preserved more reliably during drag-and-drop uploads
3.1
🖼️ Favicon added
🛡️ Privacy Policy and Disclaimer added
Integrated a complete, multilingual Privacy Policy and Disclaimer (DE / EN / FR / IT)
Clarifies operator responsibility for self-hosted installations
Written in a neutral, instance-agnostic way
📝 Legal text harmonization
Aligned wording and structure across all languages
Unified terminology and headings for consistency
3.0
👤 New User Upload Mode (user_upload)
Introduces an optional multi-user upload workflow. Users can upload files but have no access to admin functions
When user_upload mode is enabled, the Admin Panel now displays which user uploaded each file in the upload list
Perfect for teams, client areas or project-based uploads
Password protection, expiration times, link creation and download continue to work as usual
🧩 Admin Panel Extensions (User Management)
Added a complete User Management module (create and delete users, reset user passwords)
User accounts are stored in a dedicated JSON file inside the inc/ directory
The admin account’s username and password can also be changed
🧩 helpers.php improvements and extensions
The default configuration is now automatically completed and merged with any missing keys when config.php is loaded
Ensures older installations or partially modified config files always remain compatible with new features
Prevents missing-key errors and keeps updates seamless
🆕 Version 2.x
2.9
👁️ Added a new “Show Download Page” toggle (show_dp) in the configuration
🔗 Lets you choose whether users see a download page (file info and download-button) or a direct file download after clicking the link
🛠️ Fully integrated into the Admin Panel configuration and stored in the main config.php file
2.8
📧 Added support for a separate SMTP FROM address (SMTP_FROM_ADDRESS) so the visible sender can differ from the SMTP login (same domain required)
🛠️ Reworked SMTP sending to be RFC-compliant (adds Date, Message-ID, MIME-Version, multipart text/plain + text/html, UTF-8 encoded subject) for better compatibility with spam filters
🖥️ Admin Panel extended with a new field to configure the SMTP FROM address, which is stored in the .env file
🗂️ Improved Docker support for persistent configuration: the entire inc directory (including .env, .admin.json, config.php, translation files) can now be mounted from the host
💾 Upload directory can now also be mounted externally via DROPZONE_UPLOAD_DIR, making all uploaded files persistent and safe across container updates or reinstallation
📦 When mounting an empty inc directory, Dropzone automatically initializes it with the default files from the image, ensuring a clean setup when the container is recreated
🔄 This means both all settings (SMTP, admin login, configuration options) and all uploaded files are preserved even if the container is removed and recreated
2.7
📧 Added optional Admin email notifications for new uploads
📝 Admin email address configuration directly in the Admin Panel
⚙️ Added new toggle Admin Notify in configuration settings
2.6
📊 Download tracking added (download counter + last download timestamp)
👁️ Display of “Downloads” and “Last Download” directly in the Admin Panel
2.5
⚙️ Improved Admin Panel with configuration and email settings
🧭 Clearer navigation and visual refinements in the Admin Panel
📱 Fully responsive redesign of the Admin Panel for mobile devices
🔍 Integrated search function for uploads
2.4
⚙️ Added Admin Panel with password-protected setup
📎 Manage Uploads (change expiration time, change password)
📥 Download Uploads directly from the Admin Panel
🧹 Delete Uploads directly from the Admin Panel
2.3
🔒 Security improvements
🗑️ When the user manually cancels the upload, reloads the page, or closes the browser, temporary files are cleaned up and the entry is removed from the JSON file
2.2
🔒 Security improvements
💾 Check for sufficient disk space before upload (error message if too little free space)
2.1
📧 The time period for which the file is valid is included in the email to the recipient
2.0
📘 Completely reworked chunk upload
⚠️ No more errors when uploading very large files
🐞 Other bug fixes
✨ Version 1.x
1.9
📘 New logo, colors and file list
📱 Responsive design for phones
1.8
📧 Option to send files via email or just copy the download link
1.7
📧 Share a unique download link directly to the recipient’s email inbox (multiple recipients supported)