CWP (CentOS Web Panel) - Changelog
Version 1.28 - changes since version 1.27
============================================================
Security
--------
- PHP Defender (Snuffleupagus): PHP versions running as CGI (suPHP) or from the shell no longer stop with "Could not
startup" when PHP Defender is enabled for them - the rules PHP reads were in a folder only root can open. They are now
published to /usr/local/cwp/phpdefender/ (the editable copies stay where they were); existing installations are
switched automatically by the daily cron.
- PHP Defender: a version whose Snuffleupagus extension is missing or was built for another PHP version (so the rules
were silently not applied) is marked "Not active" in Security Center > PHP Defender; delete and install it again.
Fixes
-----
- Dashboard: no more "AutoSSL is disabled" warning that pointed to a missing page ("The module autossl does not exist")
- the warning now only appears when SSL auto-renewal is off, and the AutoSSL tile and warning open SSL Certificates.
- SSL Certificates > Configure: saving no longer ends with a PHP 8 error; the cron times are validated.
- PHP Switcher 8.4 / 8.5 on CentOS 7: the optional modules (imagick, sodium, redis, memcached, apcu...) install again;
they looked for php-config in a folder the Switcher PHP does not use and stopped with "configure failed".
- Webmail (Roundcube 1.6): logging in through https://your-domain/webmail/ works again - the login form sent the login to
the website instead of webmail. Existing servers are fixed automatically by the nightly Roundcube check.
- Webmail auto-login from the admin panel (Email Accounts) and the user panel works again with Roundcube 1.6 (it ended
on the login page).
Happy to be on RC 1.6 now!