Filegator Versions Save

• Security fix, see #349
• Persian translations added

• Arabic translations added
• Brazilian Portuguese translations added
• Output buffer flush fix

• Database auth adapter session fix
• Development mode warning added, see installation docs https://docs.filegator.io/install.html

This version patches a security vulnerabilities please upgrade asap

• Hebrew translation with RTL added, see #301 (Thanks yaniv1983)
• Romanian translation added, see #302 (Thanks enyedi)
• Default error_reporting set to pre-php8 (Fixes #307)

• Fix file deletion error when overwrite on upload #293 (Thanks iwiniwin)
• PHP 8.1 issue fixed, see #295 (Thanks bashgeek)
• Small bug fixes

• Default cookie options added: cookie_httponly=true, cookie_secure=null
• Clickjacking prevention with X-Frame-Options/Content-Security-Policy headers
• Fixes #243, #239, #246, #251, #254, #257
• Slovenian translation added, (Thanks megamiska.eu)
• Dependency bumps
• Docs update
• Default logo update to vector

Notes / Breaking Changes:

The new default value of the cookie_secure option is null, which makes cookies secure when the request is using HTTPS and doesn't modify them when the request uses HTTP. The new behavior is a good balance between making your app "safe by default" and not breaking any existing app.

If your filegator is used inside an iFrame, it may stop working after the upgrade. Set 'allow_insecure_overlays' to true to maintain compatibility. https://github.com/filegator/filegator/blob/63645f6e047eef828a96f913bd421f7018c94e05/configuration_sample.php#L75

• Default cookie options added: cookie_httponly=true, cookie_secure=null
• Clickjacking prevention with X-Frame-Options/Content-Security-Policy headers
• Fixes #243, #239, #246, #251, #254, #257
• Slovenian translation added, (Thanks megamiska.eu)
• Dependency bumps
• Docs update
• Default logo update to vector

Notes / Breaking Changes:

The new default value of the cookie_secure option is null, which makes cookies secure when the request is using HTTPS and doesn't modify them when the request uses HTTP. The new behavior is a good balance between making your app "safe by default" and not breaking any existing app.

If your filegator is used inside an iFrame, it may stop working after the upgrade. Set 'allow_insecure_overlays' to true to maintain compatibility. https://github.com/filegator/filegator/blob/63645f6e047eef828a96f913bd421f7018c94e05/configuration_sample.php#L75

• Better search with configurable simultaneous search limit, fixes #234

• This version patches a security vulnerability, please upgrade
• Invalidate sessions when the user is changed, prevents session fixation (json, database)
• Cookie samesite defaults to Lax, fixes #232