CWP 2.0.2 (Edge) – changes since 2.0.1
Includes every fix from LTS 1.30.7. Edge-specific in 2.0.2:
Features
CWP Cage:
- Bulk operations and a live per-account resource view in the Cage module.
Tools:
- install_wp_cli: one-command WP-CLI install, downloaded from the CDN and checksum-verified.
- Ebury cleanup tool (/scripts/cwp_ebury_clean) plus a Security Audit check that detect and quarantine a tampered libkeyutils (the Ebury SSH credential-stealer) using a static busybox, so the check works even on a compromised host.
Fixes
Security & updates:
- Panel update/version checks and the MySQL upgrade helper now fetch over HTTPS instead of plain HTTP (closes an on-path tampering surface on root-run downloads).
- CWP Secure Kernel: UEFI boot-entry handling made consistent and the trial-boot/bootcheck rollback no longer stalls.
Mail / PHP:
- PHP mail() logging: when enabled, PHP-FPM writes the per-account log under /home/<user>/logs so it works on EL8/EL9 (and hardened EL7) where /usr is read-only.
- Webmail opens on webmail.<domain> with a matching certificate.
Backups / databases:
- Legacy backup now includes and restores each account's MongoDB databases.
- CWP-to-CWP "Sync again" no longer leaves 403 errors or duplicated mail.
- User-panel: deleting a database user no longer logs a MySQL grant-table error.
File Manager:
- Decompressing a .gz file works on EL7 again.
ModSecurity:
- Enabling ModSecurity on AlmaLinux/EL10 works (reuses the existing module instead of recompiling).
Plus the rest of the LTS 1.30.7 fixes.