Changelog


Important note: manual patches are being released continuously, so if you are a FileRun client,
please check the forum at https://feedback.filerun.com for the latest changes.


FileRun Update 2024.1.2 (August 2024)


  • Important fixes
    • Ability of independent admins to create/edit roles when their accounts are configured with a home folder template path and a space quota.
    • Independent admin users which have a home folder template path assigned and a space quota assigned cannot create or edit user accounts because the "Home folder" tab is not shown, and they don't have access to setting a required space quota.
    • The "Maximum login attempts" limit did not apply when the provided user credentials were correct but the 2FA code was not. Now it does, so the user no longer has unlimited 2FA tries.
    • Fixed undisclosed account enumeration vulnerability.
    • Fixed blank display of the URL in the web linking panel under "Albums".
    • The option to set a download limit is no longer shown when sharing via link a folder or collection. This applies also to when sending a folder via e-mail as web link; the overwritten setting for download limits will not apply to shared folders.
    • Safari prevents right-clicking where a window with an IFRAME was open, even though it is no longer visible.
    • Fixed scrolling the user signup page on mobile devices, which worked only by dragging on certain areas.
    • Fixed display of "Send a notification now" checkbox when creating a new user account.
  • Important changes
    • E-mailing files as password protected web links no longer includes the password in the shared link, and needs to be separately communicated to the recipients.
    • Guest users created by independent admins or users created by independent admins, are now owned/managed by the independent admin user. This also means that they will take out of the independent admin's "Max users" quota and the admin's space quota.
    • Removed the Pusher.com integration. It provided too little benefit, and it was not used enough to warrant maintenance. A new column is now available in the control panel list of users. It is named "Last seen" and it shows how long ago the user accessed FileRun by any means. The list of users can be sorted by the column, to show users likely to be online.
    • User sign up process changes
      • The option "Automatically generate the passwords." is now enabled by default and users cannot signup by specifying their own passwords. They will however be asked to change the password on first login.
      • FileRun no longer e-mails activation links. The e-mail address is validated through the temporary credentials the user will need in order to login.
      • The e-mail address is now a requirement when using the self-registration process. The username can no longer be specified by the visitors and the e-mail address will automatically be used for the username. That is because the validation can be used to obtain valid usernames, which can then be used for brute force attacks.
      • The generated passwords are now at least 12 characters long, regardless if the minimum length in the password policy settings allow for shorter.
      • Fixed reCAPTCHA handling.
    • The template file for the e-mail message is no longer "customizables/emails/signup_email.tpl.txt". If you wish to customize the e-mail message, make a copy of the file "core/includes/emails/english/signup.tpl.php" to "customizables/emails/signup.tpl.php" and edit the copy accordingly.
  • Other
    • Renamed from "Your account has been deactivated!" to "Your account has been deactivated!" for accounts that haven't logged in before.
    • Added information to the control panel section "FileRun" -> "Update" about the build version and last updating date.
    • Better error handling when sending files via e-mail.
    • Fixed tooltips on Safari.
    • Fixed star rating field values not showing under the metadata panel unless the mouse was over.
    • Fixed context menu option "Information" -> "Copy direct path" on Safari.
    • Disabled the "Admin" tab for the superuser when editing its user account permissions.
    • Added ability of checking the PHP error log from the FileRun control panel, under the "Reinstall" section.
    • Added information about the ionCube extension version in the FileRun control panel, under the "Reinstall" section.
    • The "Trash" is no longer shown for guest users when they have the ability of making changes.
    • The "Add to" -> "Photo album" option is no longer shown for users without home folders, thus missing the "Photos" section.
    • The superuser can no longer delete a role which is assigned to new users via third-party authentication.
    • Fixed collapsible fieldsets not collapsing when unchecking the box.
    • FileRun no longer defaults to using STARTTLS when connecting via SMTP to servers which advertise the option and "Security" is set to "None". If you want to use STARTTLS you need to manually set it.
    • Fixed autoheight on textareas.
    • Better crossplatform handling of LibreOffice.
    • Fixed pressing again the "Check path" button, in the control panel, if the previous time the check resulted in a server error.
    • Added control panel options for exporting and importing settings.
    • Improved windows and prompts animations to distinguish between them and to make it clear to the user when a maximized window is opened.
    • Fixed PHP error under certain circumstances when trying to list the users in the control panel.
    • Prevented "Account deactivated" action to be triggered more than once on multiple failed login attempts.
    • Removed the option to login with the 2FA code typed inside the password field because it was causing problems with passwords which happened to include a forward slash character followed by 6 characters at the end of the password.
    • Included the error code in the user activity log entry for failed login attempts.
    • Reintroduced the "User manual activation" and the "User manual deactivation" activity log entries which are added when a user account is deactivated/reactivated by an admin user.
    • The option to edit the role, shown when setting a role for a user, is no longer displayed for admin users which do not have permission to manage roles.
    • Fixed the display of the progress bar under the folder control panel section "Maintenance > Index file metadata", getting stuck at around 80% while the process actually completes entirely.
    • Added control panel option to include custom command arguments when using FFMpeg for generating thumbnails.
    • Fixed https://feedback.filerun.com/communities/1/topics/2275-update-to-202410-failed-sqlstate42000-syntax-error-or-access-violation-1071-specified-key-was-too
    • Allowed smaller thumbnails to stretch more when using the "large" grid layout, in order to fill the thumbnail space.
    • Added missing colour to one-character tags.
    • Added the possibility of adding the tag 0 (character zero).
    • Fixed independent admins ability to add all users to a newly created group.
    • Fixed checkbox options showing always checked when editing the settings of a file plugin from the control panel.
    • Fixed display of loading masks on panels which have been scrolled.
    • Better error handling for retrieving Exif metadata from HEIC files when unsupported.
    • Fixed border radius on mobile for the "New" button.
    • The "Media Info" plugin no longer shows as an option for unsupported file types.

FileRun Update 2024.1.1 (July 2024)


  • Made compatible with the Nextcloud mobile app to prevent warning regarding an obsolete server version.
  • Fixed the Safari warning prompt when trying to print file comments.
  • Fixed the ability of deleting or restoring previous file versions on a file which is locked by the same user.
  • Fixed ability of switching between view modes on Safari iOS.
  • Fixed hiding of the loading animation on the "WebDAV Credentials" page which opens when once clicks "Connect app".
  • Fixed the content search option showing in the search panel when content indexing is not enabled.
  • Fixed hiding the loading message in the "E-Book Reader" plugin, visible on mobile when opening the menu.
  • Fixed showing additional details (such as full dates for Modified/Created, or full byte size) via tooltips under the Details panel.
  • Fixed small JS error showing the developer console when opening the "E-Book Reader"
  • Fixed display of requirements table on the installation guide when cell data is very log, as when there is a long list of disabled PHP functions.
  • Added config option "$config['system']['db']['skip_check_for_installation'] = true;" to force skipping the database checking on installation. To be used on hosting services which disable the use of "SHOW DATABASES"
  • Fixed the authentication integration removing users from their groups when the option "Sync remote groups -» Remove users from old groups" is checked. The option is now ignored by plugins which do not support group importing.
  • The Authentication control panel section now hides the option "Sync passwords to the local database" and "Sync remote groups" if the selected plugin does not support the functionality.
  • Fixed PHP error when trying to run "cron/users_sync.php".
  • Added button to copy to clipboard the "Redirect URL" from the authentication integration options of the OAuth2-based plugins
  • Fixed special character encoding for a few fields in the control panel list of users.
  • Fixed misspelling "Downloaded through you's web link" under the Activity log.
  • Fixed shortening web links
  • Removed the HTTP header "Last-Modified" from file downloads to improve privacy.
  • Fixed E-tag to be identical when served via WebDAV or directly. Should help the Nextcloud desktop sync avoid a possible confusion.
  • Optimized static assets caching to speed the UI loading up.
  • Fixed installer not assigning system metadata fields and fieldsets correctly to metadata file types.
  • Made updater fix system metadata fields and fieldsets assignments if wrong.
  • The layout rocker button now changes icon to show when the layout to switched between Thumbnails and Photos
  • Fixed display of file/folder names which start with taller letters (such as "j") when the layout of the file list is grid.
  • Fixed ability of changing password in some cases, when "Prevent user information to be used as part of the password" is enabled and user types into the new password a number which matches the FileRun user account id.
  • Regression fix for editing the "Guest" role settings.
  • Fixed tag name display in the browser page title when browsing media library by tag.
  • Fixed display of virtual folder in the tree menu when browsing a tag folder under "Photos" » "By tag" from the file list. The browser tag folder would show as expandable and would not behave correctly.
  • Fixed background color inside the Metadata panel on dark mode.
  • Made it clearer how many users are online under "Control Panel" » "Users" » "Users online".
  • Users without the permission "User can access the files' activity logs" enabled are now also shown under "Control Panel" » "Users" » "Users online" when they are online.
  • (Regression) Fixed hover visual effect for link buttons, such as the "Sign out" menu option.
  • (Regression) Fixed activating link buttons, such as the "Sign out" menu option, using the SPACE key.
  • Fixed ability of regular admin users to list and edit user accounts, access the "Activity logs", "Storage usage" and "Web Links" control panel sections, when they are not allowed to add user accounts.
  • User accounts edited by simple admin users, no longer show in the list of users, but only for the superuser.
  • Fixed option "Require user to change the password" getting automatically unchecked for users. The downside is that when you change the value of "Number of days users can use the same passwords" to a higher value, the users which were automatically required to change the password because the previously configured period elapsed are still going to be asked to change the password, even if the new configured period is longer.
  • Improved the dark theme. Requires reloading a color preset from the Theme control panel section after applying this update.
  • (Regression) Added back padding at the bottom of the grids/lists.
  • Added space on the left and right side of the file list in "List layout" to allow selection by click and drag.
  • Made the action bar a bit thinner.
  • Texts which do not fit inside a list header cell now show a tooltip on mouse over.
  • Prevent text highlight/selection in control panel lists, when using the click and drag multiple row selector.
  • (Important regression fix) Independent admin users which have a home folder template path assigned and a space quota assigned cannot create or edit user accounts because the "Home folder" tab is not shown, and they don't have access to setting a required space quota.
  • Prevented "Account deactivated" action to be triggered more than once on multiple failed loggin attempts.
  • Fixed authentication vulnerability. The "Maximum login attempts" limit did not apply when the provided user credentials were correct but the 2FA code was not. Not it does, so the user no longer have unlimited 2FA tries.
  • Fixed account enumeration vulnerability.
  • Removed the option to login with the 2FA code typed inside the password field because it was causing problems with passwords which happened to include a forward slash character followed by 6 characters at the end of the password.
  • Included the error code in the user activity log entry for failed login attempts.
  • Reintroduced the "User manual activation" and the "User manual deactivation" activity log entries which are added when a user account is deactivated/reactivated by an admin user.
  • (Regression fix) The option to edit the role, shown when setting a role for a user, is no longer displayed for admin users which do not have permission to manage roles.
  • (Regression fix) Fixed the display of the progress bar under the folder control panel section "Maintenance » Index file metadata", getting stucked at around 80% while the process actually completes entirely.
  • Added control panel option to include custom command arguments when using FFMpeg for generating thumbnails.
  • Fixed https://feedback.filerun.com/communities/1/topics/2275-update-to-202410-failed-sqlstate42000-syntax-error-or-access-violation-1071-specified-key-was-too
  • Allowed smaller thumbnails to stretch more when using the "large" grid layout, in order to fill the thumbnail space.
  • Added missing color to one-character tags.
  • Added the possibility of adding the tag 0 (character zero).
  • Fixed independent admins ability to add all users to a newly created group.
  • (Regression fix) Safari prevents right-clicking where a window with an IFRAME was open, even though it is no longer visible.

FileRun Update 2024.1.0 (May 2024)


  • Highlights

    • Refreshed user interface with better ergonomics, improved keyboard accessibility and better mobile experience (including for the control panel).
    • Many fixes and smaller improvements (the list bellow is not comprehensive).
    • Under the hood:
      • The UI library has been reworked from the ground up.
        While more capable than before, it renders up to 50% faster than before on the first load, paving the way to using the same feature-rich interface for shared web links (coming later this year).
        It will allow FileRun to soon meet the WCAG 2.2 standard of accessibility.
        The improved modular structure will make development several times faster than before while preventing regression bugs. This means more frequent updates, and of higher quality.
  • Important fixes

    • Fixed creating user accounts via the API.
    • Fixed differentiating between files/folders with similar name but different accent on one or more letters, located inside the same folder. For example, trying to share a folder named "FíleRún" next to a folder named "FileRun" would share the wrong folder, "FileRun".
    • The option "Allow visitors to download this file." did not work correctly.
    • Fixed file/folder name containing non-UTF-8 characters preveninting desktop sync and access via WebDAV.
    • Fixed WebDAV compatibility with clients requiring "resourcetype" for files.
    • Fixed preservation of file/folder name containing non-UTF-8 characters when downloading. This issue manifested so far only with Turkish characters. Make sure PHP is configured with default_charset = "UTF-8" (it's the default setting).
    • Security fix: prevent cached URL to be changed by HTTP Host header attacks.
    • Fixed showing thumbnails via Nextcloud desktop sync.
    • Fixed ocasional "Loading..." screen after update (when URL changes). - https://feedback.filerun.com/communities/1/topics/1936-loading-after-upgrade
    • Fixed bug allow one user to share via link a folder shared by other user without the sharing permission.
    • Fixed ability to send files by e-mail from shared folders.
  • UI & UX

    • Better UI responsiveness to ensure the file list is never squished.
    • Reorganized the contextual menu, for better ergonomics.
    • Folders can be now mixed with files for sorting in all views.
    • The non-photo files now maintain their regular thumbnail looks when listed in a photos layout mode.
    • Back/forward works as expected when opening files in the viewer.
    • Direct links to files open the files in the file viewer.
    • Texts which show an ellipssis because they do not fit for display, now show tooltips.
    • Much improved usability of the control panel, both desktop and mobile.
    • Many improvements to the image viewer related to zooming and panning. You can double-tap/click to quicly zoom in and out. Added animation for swiping.
    • Windows can be dragged using the finger on touch screens.
    • The folder tree panel can be resized using the finger on touch screens.
    • Added dark-mode support for the OpenDocument Viewer.
    • Made the file viewer open full width.
    • You can now search for groups as well, when sharing files with other users.
    • Made the control panel theme editor expanded by default.
    • The "Welcome message" on the login form is no longer limited in height. It is now displayed in full without having to scroll.
    • Fix top horizontal toolbar not wrapping when changing the file/folder selection.
    • Fix: Missing toolbar from text editor.
    • Fix: Removed border radius from login page foot section. It was clipping the text.
    • Fix: links colors on dark mode, being too dark.
    • Fixed folder icon color on dark mode, when sharing folders via web links.
    • Fixed 2FA QR code scanning on dark mode.
    • The scrollbar is now always shown on form components listing users and groups in the control panel, to make it obvious that there are more records.
    • Fixed background playback of video adjacent to clicked item in web linked gallery (https://feedback.filerun.com/communities/1/topics/1883-web-share-gallery-view-video-audio-starts-playing-when-neighboring-image-clicked)
    • Detailed/Compact list
      • The filename column now remembers its custom width after reloading the page.
      • Swapped positions between "Modified" and "Size" grid column.
      • Fixed horizontal scrollbar showing unnecessarily in the file list after Chrome update.
      • Fixed horizontal scrolling reset when selecting a file.
      • Made dragging autoscroll faster and smoother.
      • Smoother horizontal scrolling of the columns headers.
      • Optimized the first render speed.
      • The menu for choosing columns has been moved from the header bar next to the refresh button.
      • You can now order the file list by a column regardless if the column is visible or not.
      • No longer resetting horizontal scroll when changing pages.
    • Fixed new folders now showing in the tree folder after creation when the current folder does not have other subfolders.
    • Increased size and contrast on the icons showing files/folders linked/shared/starred/etc status.
    • Aligned the above-mentioned icons next to the filenames in the detailed/compact display mode.
    • Selecting a file/folder in the thumbnail mode no longer hides the icons and tags.
    • Fixed missing margin space between bottom of screen and the left-bottom menu on mobile.
    • The "Select users" prompt can be now dragged and resized.
    • For narrower screens, when dragging tags from the details panel, the various open panels which might be opened are automatically hidden so that you can continue dragging tags to files/folder.
    • Fix: removing files and folders from a collection, now removes them from the list.
    • Added option for opening the default file preview in new browser tabs.
    • When the file extension is shown as a grid column, is now omitted from the file name column.
    • Fixed not showing "Save changes" button when editing the plugin "Open in browser".
    • Various code optimizations for faster loading.
    • Optimized fonts icons to save bandwidth.
    • Various minor cosmetic improvements.
    • Fixed copy to clipboard on Safari and Firefox.
    • Added transparent background to the file viewer when viewing TIF/TIFF files.
    • Made tags look cleaner in the tree panel and navigation breadcrumbs.
    • Fixed the "Detailed list" vide mode in "Collections" and other sections which are not listing real folders or lists of files.
    • Theme shape size changes are getting saved but new values do not have effect.
    • Fixed login form width when title is very long.
    • Added top toolbar option for downloading file collections.
    • Prevented flash of white screens on dark mode under the control panel.
    • You can now choose multiple files to preview in new browser tabs.
    • Improved the layout of the search panel and made it more usable on mobile.
    • Fixed calculating total size of a collection when it contains both folders and files.
    • Fixed display of colorful tags under the "Videos" media library section.
    • Much improved focus + keyboard navigation among the various UI elements. Along with tab/shift+tab, you can also use left/right or up/down to change selection between menu item, toolbar items, tabs.
    • Many usability imporvements on mobile devices.
    • Improved highlight of menus and other floating surfaces on the dark theme.
    • You can open multiple metadata panels at the same time, either for comparison or for copying data from one file to another.
  • Added control panel options for deactivating and/or deleting user accounts after a predefined number of inactive days. It can be found under "Users" » "More".
  • Authentication

    • The password reset function can be now used by the FileRun superuser to reenable the acount if it was blocked due to a brute force attempt.
    • Authentication sessions are now preserved if a username changes.
    • Fixed unauthenticated username enumeration vulnerability.
    • Fixed connecting ownCloud with an app password instead of the FileRun account credentials.
    • Added settings for disabling the synching of groups from the remote authentication.
    • Removed background image from the authentication settings test result page.
    • Fixed warning regarding the need to set a role when trying to save "Authentication" settings changes when no plugin is enabled. - https://feedback.filerun.com/communities/1/topics/1936-loading-after-upgrade?redirect_to_reply=7749#comment-7749
    • Fix redirect after external login.
    • Fixed blank page in Authentication settings (PHP Fatal error: Uncaught Error: Class "FileRun\Auth\Custom\Oauth2\Plugin" not found).
    • The login flow no longer recommends a particular 2FA app and is now showing the secret code for manual copying to the 2FA app.
    • LDAP
      • Fixed group assignment for users when importing from LDAP/AD.
      • Fixed synching users from LDAP/AD specific groups.
      • Better error handling when using LDAP auth with two Search DNs.
      • Made LDAP authentication always retrieve the user's bind DN from the server rather than using the "User DN template", which is now used only for binding directly with the user credentials. This should fix authentication against Active Directory.
      • Better error handling when the LDAP authentication integration is misconfigured without either a "Bind DN" nor a "User DN template".
      • Fixed PHP error when setting the option "Use LDAP-MATCHING-RULE-IN-CHAIN to retrieve nested groups:" to "yes". - https://feedback.filerun.com/communities/1/topics/1970-ad-authentication-not-working-after-update
      • The "Groups to allow access to" no longer need to be included in the "Groups to import" list.
      • Better performance when authenticating when access is limited to certain LDAP groups.
      • Added option to test the import directly from the control panel. The option "Enable debugging" no longer needs to be enabled (which could cause troubles to users trying to login while the admin is troubleshooting)
      • Made the LDAP/AD bind password hidden when not editing. Made the LDAP/AD "Groups to import" and "Groups to allow access to" fields larger.
      • Added option for a second LDAP/AD search dn.
    • SimpleSAMLphp
      • Regression fix after 2023.1.0
      • Fixed importing group names with correct case from SimpleSAMLphp.
      • Fixed authentication with SimpleSAMLphp when limited to certain groups.
  • User registration

    • Fixed PHP error when using the user signup system, preventing the user from receiving proper feedback from the process.
    • Fixed JS console error message on the user signup page when Captcha is disabled yet unconfigured.
    • Added logo on the user registration page.
  • Other fixes

    • Markdown rendering of text lines.
    • Error after deleting a translation file which is in use.
    • Video playback not stopping after closing file viewer. Other type of content would also stay open in the background using memory.
    • Large download resuming or video streaming hitting PHP memory limits on certain server configurations.
    • Using Tika in server mode.
    • Accessing ONLYOFFICE with "JWT secret".
    • Error handling on invalid HTTP_IF_MODIFIED_SINCE values on downloads.
    • Error handling when "Number of days users can use the same passwords" does not have a valid value.
    • Fixed saving changes to documents via ONLYOFFICE and Zoho.
    • Fixed file conversion via the CloudConvert plugin.
    • Fixed ownCloud client warning about connecting to an unsupported server.
    • Tested with Nextcloud desktop 3.82. Tested with ownCloud desktop 4.0.0.1.
    • Fixed compatibility with sendmail which requires header lines to end with CRLF. It fixes e-mail notifications when they might show raw HTML tags in the message.
    • Added control panel option for manually running e-mail notifications. Useful for troubleshooting notifications when the option "Instant email notifications" is disabled.
    • Fixed control panel activity log records showing "[Nonexistent share]" in some shared paths.
    • Fixed errors when trying to send e-mail notifications via the command line. (https://feedback.filerun.com/communities/1/topics/1889-php-fatal-error-emails-notifications-command)
    • Added control panel option for troubleshooting e-mail notifications based on a selected activity log entry.
    • Fixed error in trash folder (https://feedback.filerun.com/communities/1/topics/1894-accessing-trash-returns-failed-to-load-file-list-there-is-a-server-internal-error-http-code-500)
    • Fixed user avatar in the Nextcloud/ownCloud apps when signing in with a WebDAV password instead of the main credentials.
    • Added warning regarding running PHP with memory_limit set to -1
    • Fixed error reporting when troubleshooting the thumbnail generation.
    • Fixed error while parsing certain PSD files for metadata. (https://feedback.filerun.com/communities/1/topics/1644-metadata-update-file-type-on-psd-gives-uncaught-errorexception-fread-length-parameter-must-be)
    • Fixed error when trying to save changes in the image editor on a shared file (https://feedback.filerun.com/communities/1/topics/1921-edit-photo-leads-to-error-when-i-am-not-owner)
    • Made text editor show the detected character set on first load (https://feedback.filerun.com/communities/1/topics/1845-filerun-update-202310-bug-reporting-and-patch?redirect_to_reply=7542#comment-7365)
    • Fixed searching inside shared folder. (https://feedback.filerun.com/communities/1/topics/1903-guest-user-searching-with-tags?redirect_to_reply=7544#comment-7544)
    • Fixed PHP error when accessing folders shared via web links with "Download Terms". - https://feedback.filerun.com/communities/1/topics/1955-download-terms-make-weblinks-for-folders-invisable
    • The setting "Force users to access via HTTPS." has been removed. Allowing your web server to satisfy requests via HTTP should not be allowed in production and FileRun will no longer accomodate insecure server configurations. Please make sure the redirect from HTTP to HTTPS happens at the web server level (.htaccess).
    • Removed no longer necessary requirement check for the session.save_path
    • A few small error handling improvements.
    • Fixed TinyMCE integration (https://docs.filerun.com/tinymce) - https://feedback.filerun.com/communities/1/topics/1953-tinymce-plug-in-issue
    • Fixed "tag_removed" event's data. - https://feedback.filerun.com/communities/1/topics/1871-tag-removed-event-not-working-as-expected
    • Added command line script for listing, deactivating or deleting inactive user accounts. It can be used interactively or as a scheduled task. (cron>php manage_inactive_users.php --days 30 --action list/deactivate/delete)
    • Fix requirement check in the installer, incorrectly looking for "zlib" instead of zip PHP extension.
    • When the guest user access is disabled, the guest user accounts are now shown as deactivated in the list of users.
    • The guest user account inactivity deletion period setting has been moved from the "Security" section to "More", under "User account retention policy". It is now defined in number of days.
    • Fixed showing a correct "Guest access URL" for user accounts that were assigned to Guest role but did not have a password set.
    • Fixed "Loading.." message when listing folders under "Starred" when trying to move a file/folder and there are no starred folders.
    • Uploading a translation file automatically removes non-alpha characters from the file's name.
    • Fixed thumbnail/album cover not being extracted from audio files where available.
    • Fixed accessing metadata of file with a single quote in the name.
    • Added ability of loading custom JavaScript files in various places.
    • Fixed WebDAV hitting very low memory limits when listing folders with large number of items.
    • Minor WebDAV compatiblity fix.
    • Fixed PHP error when trying to list the user activity log when it contains a record related to removing an item from a collection.
    • Improved the software update system for better error handling and reliability.
    • Added "LimitRequestBody 0" in the "recommended.htaccess" to avoid file size limits when uploading via WebDAV on an Apache server.
    • Aesthetical improvements, particularly related to animations and performance related to animations and movement of UI elements.
    • Fixed inconsistency with how the "customizables/events/" scripts were handled for canceling the actions and reporting the error. Also added config option for setting one single PHP script file for handling all user actions. See "$config['system']['fm']['hooks_file_handler']", here: https://docs.filerun.com/advanced_configuration
    • "Select users" panel fix: expanding groups after searching now shows the users in the group. Before it was just showing the search result again.
    • Because web link passwords can be only 32 characters long when setting, accessing the password protected links will now also use for verification only the first 32 characters provided in the password box, otherwise access is not granted.
    • Fixed PHP error when accessing guest login URLs.
    • Fixed not showing output when pressing buttons such as "Check version" in the control panel.
    • Better handling of HTML special characters in metadata fields that hold multiple values.
    • Adding a new user does not save properly the permission "User can make changes to files and folders" when left unchecked.
    • Web link shortening button is no longer shown if there is no configuration supporting the feature.
    • Fixed parameters for the API call for creating new user accounts.
    • Safer handling of HTML characters in file, folder and collection names.
    • The download cart feature has been removed in favor of the file collections, which provides the same functionality, with the same ease of use but more options.
    • Added "$config['app']['logging']['skip_receive_upload']" config file for disabling "File received (via upload)" log entries. Please note that this would also disable any e-mail notification related to this action.
    • Added more variables for more precision in customizing the color theme.
    • The searching inside a control panel user or group selector now shows only users or groups, based on the particular field requirement.
    • Collections can be web linked via the API.
    • The metadata indexing process skips cases where memory limit is being hit. It also displays now a log of encountered error messages.
    • Fixed ability to upload a folder whith a name starting with ".." when initiating the upload via the menus and not drag and drop or copy/paste.
    • Fixed character encoding problem when renaming second time, from the tree panel, a folder with a special character.
    • Downloading a folder with the characters ' (single quote) or % (percentage sign) in the name now preserves those character in the name of the downloaded zip archive.
    • Fixed not being able to access via a direct URL a folder with percentage sign in its name.

FileRun Update 2023.1.0 (May 2023)


  • Summary of changes

    • The architecture was redesigned for PHP 8 and the future.
    • Fresh new modern UI with theme editor.
    • File uploads on steroids. Reliably uploads anything you throw at it.
    • Faster everything.
    • Many improvements tags related.
    • Better third-party authentication integration.
    • Many security fixes and improvements.
    • Many smaller fixes and improvements which are not documented because the list would just become to large.
  • Full list of changes

    • Support for PHP 8+
    • Security and authentication

      • Fixed vulnerabilities

        • Fixed undisclosed critical security vulnerability #1.
        • Fixed undisclosed critical security vulnerability #2.
        • Fixed undisclosed critical security vulnerability #3.
        • Fixed undisclosed critical security vulnerability #4.
        • Fixed undisclosed non-critical security vulnerability.
        • Fixed the permission "User can download folders and collections" which was still allowing collections to be downloaded even when disabled.
        • Fixed e-mail enumeration vulnerability.
        • To disable the 2-step verification, the user now needs to provide the current verification code.
        • Improved CSRF protection.
        • Improved brute force protection on session ids.
      • Third-part authentication

        • Possible breaking changes
          • The authentication options are still available but not as customizable plugins.
          • If your current authentication method is no longer available in the FileRun version, the update will reset the authentication back to FileRun default.
          • If you need to continue to use a custom authentication plugin, please contact us for options before installing this update.
          • If you are using an external login form, the target URL changed. "/?module=fileman&page=login&action=login" no longer works and instead you need to HTTP POST the form, including the variable "filerun_login_action" (any value would do), to the FileRun installation root URL.
          • PHP sessions are no longer being used:
            • "$_SESSION['FileRun']['username']" is no longer a possible way to automatically sign in FileRun users.
            • The PHP settings no longer have any impact on how the user authenticated sessions are being handled.
            • There is a control panel option for choosing to log the users out when they are closing their browsers. There is also a control panel option for choosing to log other sessions out and keep only the last login.
        • Added option to login with Google.
        • Added option to login with Dropbox.
        • Added option to login with Box.com.
        • Added option to login with Facebook.
        • Added option to login with Microsoft (Azure AD OAuth2).
        • "WordPress v4" authentication is now "WordPress" and has been tested with WordPress versions 5 and 6 and the SSO process is much smoother, redirecting to the WP login form and then straight back to FileRun.
        • "SimpleSAMLphp v1" is now "SimpleSAMLphp" and has been tested also with SimpleSAMLphp version 2 (tested with 2.0.3).
        • LDAP
          • The LDAP authentication plugin is now using the "Bind DN" to retrieve the user's record and group information.
          • Fix: The remote groups are now synced for the user accounts also when signing in using IWA SSO.
          • Improved troubleshooting.
        • Added dedicated authentication option for "Microsoft Active Directory". It extends the LDAP option with default settings for quicker or alternative setup.
      • Added option to force the last login to be the only authenticated session. This will log out all other active browser sessions, and will not affect existing OAuth2/API sessions or WebDAV access.
      • FileRun now informs the user with a message when he gets logged out because the authentication session expired.
      • FileRun now records inactivity logouts to the user acitivity log, so you can see when it happens and even attach e-mail notifications to it.
      • Guest accounts can now also be limited by IP.
      • When the third-party authentication plugin is limited to a particular IP address range, the third-party authentication is completely disabled for other users (no longer attempting login against the third-party system, nor showing the SSO button).
      • Signing in as a different user now logs the logout+login actions.
      • The action of removing a guest user account which no longer has access to any shares is now logged to the user activity log.
      • Logging out via the OAuth2 consent screen now logs the action as normal.
      • Fixed not updating last user login date when logging in via SSO.
      • Gracefuly allow signing in with another user account if the login page is open in one tab while already signed-in in another tab.
      • Accessing WebDAV with the main user account credentials when 2FA is enabled now results in a HTTP "400 Bad Request" error. This is more intuitive, rather than confusingly allowing the user access for just a few seconds until the current verification code expires.
    • Important fixes

      • Fixed crash of Android Nextcloud app when accessing FileRun.
      • Fixed warning in both ownCloud and Nextcloud apps regarding unsupported server version.
      • Fixed compatiblity with ONLYOFFICE 7.1
      • Fixed problem with user getting logged out because of inactivity while uploading large files.
      • Multiple files/folders can be now shared at the same time also anonymously.
      • CSV Editor plugin: Fixes saving changes. Fixed horizontal scrolling. Fixed support for non-UTF8 files.
      • Fixed FileRun not loading for users which do not have the permission to upload files nor make changes.
    • File Upload

      • You can now sync changes from a local folder to the remote one, in the browser, by simply dragging and dropping that folder into FileRun. Files with the exact same bytesize and same modification time, will simply be skipped.
      • You can now upload massive number of files while being able to use FileRun smoothly.
        The uploader no longer lists all files to be uploaded, but instead it groups the files by folders. Also, uploading more than 10 files, it groups them into one.
        It uses considerably less memory and CPU.
      • You can now upload image files to FileRun by directly dragging them from other web pages into the FileRun UI.
      • You can now upload also the empty folders in a selection, using copy+paste and drag+drop. Note: The folder upload via the "+ New" menu does not preserve empty folder structures (browser limitation (https://bugs.chromium.org/p/chromium/issues/detail?id=360412)).
      • Preserves files and folder last modified date from the user's computer to the server.
      • Fault tolerance

        • Intelligent automatic retries with various time intervals.
        • The upload queue no longer stops for any reason. Regardless if files/folders fail to transfer, the queue will continue until the last item.
        • The files/folders which failed to transfer, can be individually retried at any later time.
        • It lets users know if the network connection goes offline and automatically resumes when the connection is restored, regardless of how long that might take or in which stage of the transfer the connection went offline.
        • The number of max simultaneous files uploading drops automatically to 1 when a slow network connection speed is detected.
        • If an interrupted chunk has been actually successfully saved on the server, no longer errors out, but automatically skips ahead accordingly to resume the transfer.
        • Two different computers uploading the same file at the same time won't error, and it won't corrupt the file data either.
        • If a temporary upload file gets removed from the server durring a transfer, the file transfer automatically starts over.
      • Skips uploading folders like "@eaDir", ".DS_Store" or "$RECYCLE.BIN"
      • Skips files which are not allowed on the server before even trying to upload them.
      • Multiple users can successfully upload the same file, in the same folder, at the same time, without competing with each other and without corrupting the file.
      • Dynamic chunk size, adjusted automatically based on the user's connection speed, to allow users on slow connections to restore interrupted uploads more efficiently. FileRun helps you now never loose more than 5 minutes of upload.
      • Long uploads no longer log the users out.
      • More accurate individual and overall progress when transfers get interrupted/resumed.
      • Much more accurate transfer speed calculation and time remaining estimates, putting more weight on more recent transfer speeds, and taking into account server response times.
      • If a file transfer fails, the percent completed is still displayed.
      • Takes into account file's modification date to avoid resuming the wrong transfer if the file has been changed in the meantime.
      • You can upload the same file in multiple folders at the same time.
      • Better progress indicator when uploading a large number of empty files or folders.
    • UI and UX

      • Fresh new modern UI

        • Clean and streamlined, bringing the focus back on the content.
        • Smooth transition between the light and dark mode with many improvements for the dark mode.
        • The folder location of a selected file is now prominently displayed at the top of the file list. This allows you to identify files much quicker, compared to waiting for the selected file's information to be loaded on the "Details" panel.
          Particularly useful when browsing collections, search results or looking at the new shortcut files.
        • Colorful tags can now be displayed in the list of files and folders, in all display modes. You get to choose how many tags to display, and if they are displayed as a tag icon or textually.
        • Improved file viewer

          • Redesigned for bringing the focus on the file.
          • Remade for experience and performance.
          • Added touch support. Swipe left and right to browse images. Using pinching with panning for zooming.
          • You can click next to an image/file, instead of the back arrow, to close/hide the viewer.
          • You can now click the file's name to change it.
      • Themes

        • Brand new theme editor which allows you to completely customize the colors of the UI, both for the light and the dark version.
        • It is much easier now to create a custom theme.
        • The Google Drive theme has been replaced with the blue FileRun theme (which is now inline with the new Google Drive looks).
        • Breaking change The Corporate theme has been discontinued. The theme will revert to the FileRun default theme, with a black and white color scheme.
        • Added the possibility of applying different themes based on user id, via the configuration file.
      • Optimized the "Compact" and "Detailed" list view modes:
        • The file extension is now closer to the file name.
        • The file and folder labels are also shown now separate from the file icon/thumbnail.
        • There is more room available for longer names, particularly on mobile
        • The thumbnail column can be used to sort files by type.
        • Tooltips for checking long filenames.
      • Added a compact list display mode for the file browser. With this mode there are no thumbnails loading.
      • Added options for adding links like "Privacy", "Impressum", "Terms" or "Help" to the login page.
      • The OAuth2 login page has been replaced with the main FileRun login page.
      • Added control panel option for preventing search engines from indexing files shared by web links.
      • The login page is now fully responsive. It fits better any screensize, also after changing device orientation.
      • Improved usability of the control panel on mobile devices.
      • Breaking change If you have set a hex color code for "Page background" you will need to use an image now, or use the new control panel theme customization options for it (though note that the "Surface" color used for the login page is also used for the main user interface, and you will need to keep it very light).
      • Added possibility of loading custom CSS files based on user groups.
      • Updated third-party services icons.
      • Audio player volume is now 100% by default.
      • Much better experience using slider controls (such as the audio player progress track) on touch devices.
      • Various other UI improvements
      • Added buttons to open the file preview and "Open with.." options in new browser tabs.
      • Fixed saving values to multiple-value metadata fields without pressing TAB or Enter before submitting the form.
      • Added option to share created web links via the user's operating system integrated sharing UI.
      • The metadata window can be now maximized.
      • The "Activity" tab shows the new entry count bubble again.
      • Fixed contextual menu options for newly created collections and albums, to allow management and sharing.
      • Added option to show logo on the login page at the top of the form.
      • Fix: contextual menu "Copy/Move" is no longer shown when the user doesn't have upload permission.
      • All metadata, comments, tags and colors are now shown for folders inside Trash.
      • Additional data which loads under the Details tab is now cached, so it no longer have to load twice from the main view to the file viewer and back.
      • Holding shift when deleting files will automatically select the option for permanent deletion.
      • Keyboard operations

        • Ctrl+F now shows a field for selecting files and folders by searching text in their filenames. Similar to the browser's "Find" function, but limited to the listed files and folders and instead of highlighting, it actually selects the items.
        • Ctrl+Shift+A will select all items of same type as the one selected. If it is a folder, all folders will be selected. If it is a file, all files with the same file extension as the selected one will be selected.
        • Removed D as keyboard shortcut for deleting items. "Delete" key remains the only way.
        • Removed R as keyboard shortcut for renaming items. "F2" key remains the only way.
        • Removed S as keyboard shortcut for searchin items. "CTRL+S" key remains the only way.
        • Creating a new folder is now done using the plus (+) key, instead of N.
        • CTRL+Enter opens items in a "New tab".
        • "Page Up" and "Page Down" for scrolling the file list.
        • After closing the file viewer, the focus now returns to the file list, so that you can continue using the keyboard.
        • 0-5 keys change the rating of the selected files/folders.
      • UI fixes

        • Fixed sorting of shared folders.
        • Fixed broken UI when user has no permissions of making any changes to files.
        • Shares listed under a user, in the tree panel, did not show details, such as stars, web links or colors.
        • Changing metadata is reflected right away in the Details panel.
        • Removing one value from a "Multiple values" metadata field by clicking the value's X button. The button got hidden, but the value was not removed upon saving.
        • Going back/forward using the browser history between FileRun UI states which include searching
        • Resizing the browser when a modal window is shown, now keeps the window in view.
        • A moved window which got hidden is now preserving the position when being shown again.
        • Fixed not being able to paste text inside FileRun's various promps and fields.
        • Fixed inline video playback of videos on Safari mobile.
        • Fixed showing if a file/folder which is shared by other users is in a one of the user's own collections.
        • Fixed dark mode not being automatically applied for ONLYOFFICE.
        • Fixed login background color when one is set.
        • Made sure popups windows do not open larger than the browser body size on smaller screens or scaled-up desktops.
      • Added right-click option to create new collections and photo albums.
      • Better thumbnails for CSV files: no third-party software requirement, very fast generation, sharp text, columns and rows borders, and dark mode support.
      • Files/folders get removed from the list when unstarring while under the Starred section.
      • Brought the search panel closer to the search button to make it easier for big screens.
      • The profile pictures are now resized on the server for smoother results.
      • Showing full date on mouse over the "Modified" date field in the grid.
    • Tags

      • Tags of multiple selected files/folders can be now managed in bulk.
      • You can now specify colors for new tags, like this: tag|color. The color can be HTML color name (ex: red, green, blue, etc.) or a hexadecimal value. If you do not specify a color, one will automatically be assigned.
      • You can now change the color of an existing tag, by clicking the tag and choosing "Change color". (The change will apply only for the selected files/folders.)
      • The sorting is now reversed, with the newest tag being shown first.
      • You can add multiple tags at the same time, if the text is separated by comma (,) or by semicolon (;). Pasting also works.
      • A new tag can no longer be added to a file/folder which already has it but with different capitalization.
      • Tags are now being shown in color under "Photos" > "By tag".
      • 2 tags are by default displayed in the list of files. You can change that from the control panel section "Interface".
      • Tag suggestions list is now sorted by frequency of use.
      • The permission required for viewing tags remains the same as before, though now it is named "User can view metadata".
      • Added option to copy all tags from a file.
      • Multiple tags with same text but different case are no longer allowed.
    • Labels and colors

      • The labeling feature has been replaced by the tags feature. Use the "Quick tag" option from the contextual menu. The predefined tags can be customized from the configuration file, just as one could customize the labels in the previous versions.
      • Existing labels will be replaced with tags of same color.
      • Note: unlike labels, tags are not affected by language translations.
      • Breaking change: If you had e-mail notifications rules set for labeling, for example on "Label received", you will need to update these rules to use "Tag received" instead.
      • Folder colors

        • Labeled folders will preserve the icon color, which can be now changed using the "Change color" option.
        • The option is available only for folders.
        • The permission to set custom folder icon colors requires the "User can make changes to files and folders" and for a shared item, the permissions must include "Make changes". This update will not alter user permissions in any way, so if needed you will have to do that yourself manually.
        • Colors are now shown for folders also when choosing the target folder for a copy/move action.
    • Search

      • Made the search panel a bit more intuitive.
      • Content search: Added compatibility with all the newer ElasticSearch server versions. Tested with up to ElasticSearch version 8.5.2.
      • Breaking change If you continue to use an old ElasticSearch version, you will need to add the following line inside "customizables/config.php": $config['elasticsearch_legacy'] = true;
      • Added control panel option for resetting the ElasticSearch index, and also for clearing the indexing queue.
      • Added compatibility with newer Elasticsearch versions. If you upgrade Elasticsearch, remember to press the "Test server" button from the FileRun control panel. If you reinstall Elasticsearch, see the "reindex_files.php" command line script on this page https://docs.filerun.com/command_line_tools to reindex your documents.
    • Nextcloud apps

      • Fixed crash on Android.
      • Fixed warning in both ownCloud and Nextcloud apps regarding unsupported server version.
      • Fix ability to remove editing permissions from a web link via Nextcloud desktop app.
      • Fixed WebDAV/Sync not working with some files from Windows servers which can miss modification times.
      • Dekstop sync: added config option for not taking the device ID into account when checking for changes. Set $config['system']['webdav']['skip_device_id_for_etag'] = true; inside the config file.
    • Other Improvements

      • Improved overall server-side performance.
      • Added the possibility of editing multiple files at the same time with Google Docs Editor.
      • The file "Edit" function always opens in a new browser tab. The same when creating new files from the "New" menu.
      • Allows users without download permission to access the media library features.
      • Creating new files with plugins always opens in a new browser tab, to allow the user to return to file management operations before being done with the new file.
      • The installation wizard is now accessible by the FileRun superuser from the FileRun control panel section called "Reinstall". This can be used to reset the FileRun installation to factory default, but also just for checking that the server meets the requirements.
    • Other changes

      • Added partial support for AVIF image files. Thumbnail generation and sizing metadata extraction. Because we don't have the date taken metadata, they will not show under "Photos" media library. (Might require an update on ImageMagick (at least v7.0.25). Same for Vips and GraphicsMagick, make sure you update them.)
      • Changing file/folder rating is now logged independently of metadata.
      • When a guest user tries to access FileRun and there are no shares and his account gets deleted, the login access attempt gets logged now.
      • Updated CommonMark markdown parsing and added an extension for tasks lists.
      • Metadata change details are now shown in a file/folder activity log.
      • Fix: The user activity of changing a file's metadata now logs the action, as it should have, to the user activity log and to the file activity log.
      • Fixed not being able to add own admin account to a group by editing the group.
      • Creating two files with the same name but different case, is no longer possible.
      • Forced usernames to lowercase for accounts created via the API.
      • The QR code image that is generated when sharing a link can be now downloaded.
      • Better error logging in the user activity when failing to delete files/folders.
      • Added config option to delete files/folders to the trash folder by copy+delete instead of move, to allow cross-disks moves. Enable like this: $config['system']['trash']['use_safe_move'] = true;
      • Gallery Web Links: Added buttons to access a file's details page, to read possible shared metadata and comments.
      • Gallery Web Links: now use a lightbox for all file types, to allow a smooth experience for browsing folders with both photos, videos and other types of files.
      • Fixed share web link via Linkedin option.
      • XMP and/or Exif metadata is now extracted from WEBP files, allowing these files to show under the "Photos" media library.
      • Improved XMP compatibility extraction of photo creation date and caption.
      • Remote groups are now synced to FileRun every time a user logs in with remote credentials.
      • Fixed WebDAV compatibility with Enpass.
      • Added definition for delimited values text files to group .csv, .tsv and .tab files as type of files that can be connfigured to edit/open by default with a particular plugin. This type of files now preview by default with the CSV editor instead of the Text Viewer.
      • The "Folder index" plugin now sorts file/folder names in a case-insensitive way.
      • Added support for webloc MacOS bookmark files.
      • Improved speed of reading a PNG dimensions.
      • PNG metadata from the tEXt textual data ancillary chunks is now imported.
      • Every image generated by FileRun is now in SVG format, so PHP GD is no longer a requirement.
      • Fixed mime types of CSS files served via FileRun, in order to be accepted by browsers as stylesheets.
      • Better handling of MySQL connection when it timesout due to long PHP process activity.
      • Fixed display of image files which are wider than the browser window, when opening image files via web links.
      • Screenshots pasted in the browser will be uploaded with the name received from the browser. This is usually the same one every time, something like "image.png", so it will overwrite a potentially existing file with the same name. This change was needed in order to preverse the name of files uploaded individually by copy/paste. Because there is no way to distinguish pasting a file from cliboard or from the file system, they were both ending up named like "Pasted image 2022-07-17 14-37-37.png".
      • Limited pasting images with preview to 10MB to prevent browser from crashing.
      • If no image processing tool is found or functioning, just output web-safe images as they are for both thumbnails and image previews. For those few cases where the managed image files are low res.
      • Breaking change If you are running Nginx and you are unable to use the FileRun API or WebDAV/sync access after the update, review your Nginx+PHP configuration and use the updated official guide to correctly configure your server to register the PATH_INFO environment variable. (The workaround which was included in FileRun to help with misconfigured server has been now removed.)
      • The "HTML Editor" plugin, which was previously shipped disabled, has been now removed entirely.

FileRun Update 20220519 (May 2022)


Summary of this fantastic update


  • Much much better mobile experience. Automatic dark mode, installable PWA, embedded PDF viewer.
  • Upload by copy+paste! From Windows Explorer or MacOS Finder into your browser! 🤯
  • Mount as Windows drive without third-party apps.
  • Edit files with your desktop Microsoft Office without downloading. Changes get saved back to FileRun!
  • Very fast loading of the UI, lower memory requirements, smoother browsing of massive folders.
  • The "Photos" view mode shows a much nicer photo grid, and it is now available while browsing any folder.
  • Collections can now hold files and folders that are shared by other FileRun user accounts. Users without home folders can now also create and manage their own collections.
  • Lots and lots of improvements and fixes, including security fixes.
  • Notes for developers

    • The FileRun favicons have been updated and the entire "images/favicons" will be replaced. If you have customized the favicon files, you will need to restore your versions from the backup folder the update creates inside "system/data/temp/" back to "images/favicons/".
    • All FileRun core JavaScript and CSS files have changed.
      The only JS/CSS customizations that will be preserved through this update are the ones made via external files ("customizables/theme.css" for CSS and "$config['app']['ui']['custom_js_url']" for JS) and the ones made via plugins.
      If you made changes to any FileRun code, you will want to verify that everything looks and works as desired after installing this update.
    • The file "customizables/include.html" is no longer parsed as Smarty code. It is also no longer included in the free FileRun version.
    • Updated the TinyMCE plugin to work with the latest version.
  • Security

    • Vulnerability Fix Fixed moderate security vulnerability allowing XSS attacks from one FileRun user to another. Thanks to Christian Pöschl and the "usd AG" Responsible Disclosure Team.
    • Warning Please make sure you are not runing an old version of GhostScript on your server. Your server can otherwise be easily compromised by any FileRun user exploiting some critical vulnerabilities. Thanks to Dr. Jens Mueller for the responsible disclosure.
    • Improvement Better security for authenticated cached content such as thumbnails and previews.
  • Mobile Browsers

    • Much better experience on mobile, for sharing, searching, tagging, commenting, editing text files.
    • Full support for dark mode.
    • FileRun now offers the option to install itself as a PWA (Progressive Web App), to open like a native app and use the full screen.
    • Faster initial loading, faster navigation through folders, better performance with large lists of files and folders, less memory usage.
    • PDF and Office file preview
      • Added PDF viewer plugin which is automatically used by the "Open in browser" plugin to open PDF documents on mobile devices without downloading the entire file nor leaving the browser.
      • It is used also by the "LibreOffice Viewer" plugin to view office documents on mobile devices.
      • This works also for when sharing PDF and office files via web links.
      • This plugin can also be used separately, though the default "Open in browser" plugin provides much better performance and experience on desktop.
      • It has support for loading very large documents progressively.
      • It remembers the last read page and can load a document fast from that particular page.
  • Photos

    • The "Photos" display mode is now available anywhere, including physical folders, virtual folders or the search result. Note that the photos will be shown with proper aspect ratio only if the file metadata has been imported in FileRun, othwerwise the thumbnails will be square because FileRun imports metadata only on upload on when manually triggered.
    • The "Photos" display mode is now using the full available space for a more aesthetically pleasing gallery.
    • Added ability of users without access to metadata to view photos and videos in full aspect ratio, as well as sort files by metadata document types.
    • Photos and videos can now be added to collections with a single click from the "Details" panel.
    • Added tree menu option under "Photos" to show only videos.
    • FileRun now imports into metadata image sizes of WebP files.
    • Added JFIF to be handled as JPG image files.
    • Added top toolbar button under "Photos" > "Albums" for creating new photo albums.
    • Option to create photo proof sheet is now shown only when image files are selected.
  • File management

    • Big Improvement Added compatibility with Windows native WebDAV. You can mount your FileRun account as a Windows drive without any third-party program. Please see this page for details. Requires that you access your server via HTTPS.
      This also means that you can use any third-party software for keeping files/folders from your cumputer in sync with FileRun, without having to use the Nextcloud desktop sync apps.
      Also, successfully tested support for Finder's "Connect to server" on MacOS.
    • Big Improvement Files and folders can be uploaded from desktop to FileRun, by copy/paste. Tested on Edge, Chrome and Safari. Not supported on Firefox.
    • Big Improvement Files and folders can be uploaded by drag and drop from desktop to a FileRun folder wherever that folder is being shown, including search results, collections, starred, etc. It also prevents dropping the files in there if permissions do not allow.
      With this change one can upload now files by drag and drop to shared folders without having to browse to the folder first.
    • Big Improvement Collections can now contain files and folders that are shared from other FileRun user accounts. Users without home folders can now create and manage their own collections.
    • Big Improvement The "Office" plugin now opens files via WebDAV to allow editing and saving back to FileRun without having to manually upload the file. First time is being used, it will ask for credentails. Use the "Connect app" option (next to the "Sign out" option in the FileRun menu) to generate credentials for your office app rather than providing your main password. Requires that you access your server via HTTPS.
    • Important Fix Uploading/Syncing files larger than 10MB via Nextcloud apps (desktop and mobile) inside folders shared by other FileRun users.
    • Important Fix Uploading/Syncing files larger than 10MB via Nextcloud apps (desktop and mobile) when the user account only has upload permission without the permission of making changes to existing files.
    • Important Fix Editing files via WebDAV when the files have been shared individually by other FileRun users, rather than via shared folders.
    • Important Fix Downloading files sometimes downloads old version from browser cache.
    • Important Change Files shared individually and the root of a shared folder can no longer be deleted by other users, not even if the "Make changes" permission is enabled. Files inside shared folders can still be deleted given the appropriate permission; it is only entire shares that can no longer be deleted.
    • Improvement You can now move files and folders from the search result by dragging and dropping over the root folder of the search.
    • Improvement Downloading a folder now preserves the complete structure, by including the empty subfolders. The files and folders also preserve their modification dates.
    • Improvement Made it clearer when a new version of the same file has just been uploaded, by refreshing the folder and the details panel.
    • Important Change Various usability improvements related to uploading.
    • Downloading empty collections now includes the collection as an empty folder inside the downloaded archive.
    • Copying/moving files/folders now shows the "Starred" section, listing the starred folders.
    • You can add files and folders to starred by dragging them from the list to the "Starred" folder.
    • Fix Anonymous shares are no longer listed twice if the user shares other items not anonymously.
    • Keyboard shortcuts
      • The shortcuts work much better now.
      • FileRun now tries to keep the focus on the file list, so that you can use the keyboard shortcuts at any time without having to click. If the file list looses focus, you can refocus by click anywhere in the list.
      • You can now create multiple folders, one after the other, using the N shortcut without having to use the mouse at all.
      • Added BACKSPACE for changing the current folder one level up.
      • Added "S" keyboard shortcut for searching.
      • Added "D" for deleting items. "Del" can still be used.
      • Added "R" for renaming items. "F2" can still be used.
      • Fix: The keyboard shortcuts no longer try do anything if the context does not allow it.
  • MacOS and Safari

    • Important Fix PDF preview on MacOS Safari.
    • Fix Fixed styling on Safari when using the "Text Viewer" file plugin.
    • Fix Fixed full-screen in the file viewer on Safari.
    • UI Fix Various fixed for Safari 14.
    • Improvement Thumbnails are now being shown for Apple ".pages" files.
  • UI and UX

    • Big Improvement Full support for dark mode, automatically set when detected in the browser. To enable this, set "Dark mode" to "Let browser decide" inside "Control Panel" » "Interface" » "Branding". The themes "Drive" and "Corporate" do not have a dark version at this time.
    • Performance
      • Big Improvement Dramathically improved initial (non-cached) loading speed of the web UI.
      • Improvement Much better performance for the file list using the detailed view mode, particularly when listing many items. Much faster selection/deselection of large number of items.
      • Improvement A bit better performance for the folder tree list when accessing folders with hundreds of subfolders.
      • Big UX Improvement Browsing virtual folders (to search files by tags or music by album or artist), is now much faster, as FileRun no longer loads the entire folder tree just for browsing a particular subfolder.
    • Under the "Details" panel
      • Big Improvement The "Details" panel now shows info also about the currently opened folder, not only about the selected files/folders. All details, such as label, rating, metadata and tags are included.
      • Labels can be now set for the selected file/folder directly from the Details panel.
      • Changed the rating icons from stars so it no longer gets confused with starring files.
      • The readme for a folder is now shown also when selecting that folder in the main list. This can be used for quickly locating the folder of interest.
      • The readme for a folder can be edited directly from the Details panel by clicking the edit button next to the text.
      • Tags are now colorful.
      • You can add a tag from one file/folder to another by dragging it from the list on top of the file/folder.
      • Added option to calculate a folder total size when the folder is paginated, compared to the total of just the current page.
      • Change Files "README" (without any extension) are now also used for displaying as text under the "Details" tab when browsing FileRun folders.
    • UI Improvement The contextual menus now shows the Prevew options when multiple files are selected, with the viewer cycling only through the selected files.
    • Important UI Fix Fix for not enabling mobile interaction for certain laptops which do not report the mouse correctly.
    • Improvement The file list remembers now the selected display mode between sessions.
    • UI Change Labeled folders have their icons in the color of the chosen label. The little label icon is no longer shown. Instead, the icon is thicker and hovering the mouse over it will show the label text.
    • Warning The file/folder labeling will be removed in a future FileRun version. The option to set custom colors on files and folders will be kept, but without a text label. For attaching textual labels, the tagging feature can be used instead.
    • Using the scrollbar in the file list no longer affects the file/folder selection. Also, no longer loosing selection when holding Ctrl or Shift key and misclicking a file/folder.
    • Folders shared with/by other users show a different icon than regular folders.
    • Made browsing deep folders a bit more comfortable in the tree panel.
    • Added option for resetting the file grid columns and sorting to default.
    • Full-screen button on the file viewer opens the web page in full screen rathar than the video itself. For viewing fullscreen videos, the video player's fullscreen button can be used instead.
    • Made it clearer in the grid column menu which metadata fieldsets metadata grid columns belong to. Also, moving the mouse cursor over a grid column header that has hidden fieldset name, now shows the fieldset name in a tooltip.
    • Button elements can be now navigated through using tab and pressed using space or enter.
    • Choosing to search files by label you are reminded which are the default label options.
    • Better error handling related to the plugins folders and code.
    • The copy/move folder chooser now lists the shared folders the same way the folder tree does, with anonymous shares on the same level as the home folder and the shared folders grouped under users without the "Shared with me" folder.
    • The contextual menus adapts now accordingly to the different permissions of files and folders shared by other users.
    • The search form opens in a popup menu to allow more space for the search result.
    • User activity log entries browsed from the control panel are now compact and expand on mouse over.
    • The option to connect a WebDAV app has been moved from under the Account settings window directly in the user menu, next to the "Sign out" option.
    • Thumbnails for plain text files now follow theme colors.
    • Fix: The login form wouldn't receive an error message from the server in the same language as the one the user selected.
    • Many other smaller fixes and improvements.
  • Other

    • Important Fix Error reporting when editing an admin user account.
    • Important Fix Bookmarking or reloading searches that contain special characters (such as the wildcard %).
    • Fix CloudConvert plugin is now compatible with the V2 API.
    • Fix Admin users that can manage only specific groups of users can no longer add user accounts without selecting at least one group that they can manage.
    • Improvement The file/folder control panel is now available for items inside the trash folder.
    • Important UI Fix Translation for the control panel menu.
    • Important UI Fix Made clickable items in folders shared by weblink when they do not have thumbnails.
    • Improvement Added support for collection to the "Folder Index" plugin.
    • Improvement The "Folder Index" plugin offers now the option of exporting as CSV.
    • Improvement Updated cURL certificate bundle.
    • Improvement Nextcloud large uploads now check the FileRun user storage quota even before starting.
    • Improvement Folder downloading is being logged as a separate entry in the user activity log. It happens also when downloading a folder that has no files.
    • Improvement Markdown rendering now supports tables.
    • Various fixes to the image editor.
    • Fix Nextcloud large uploads now check the max configured upload file size of the FileRun user account. Before the size was checked only on individual upload chunks only, not total.
    • Fix Moving files and folders by drag and drop on small screens.
    • Fix Activity log not showing file/folder names correctly after restoring from trash.
    • UI Fix Avatar display inside Nextcloud desktop app.
    • UI Fix Added menu indicator in tree menu to collections.
    • UI Fix Hidden "Label" from contextual menu on various tree options which can't be labeled.
    • UI Fix On mobile devices, exiting viewer when selecting several files no longer cancels the file selection.
    • UI Fix Bubble indicators not showing on Activity and Comments tabs.
    • UI Fix Showing "Preview" option in the context menu on files inside the trash folder.
    • UI Fix Drop-down lists now show full-width options.
    • UI Change Moved "Copy path" contextual option under "More options" and is now available also when right-clicking items in the grid.
    • Fix Control panel activity log file names for items inside the trash folder or items shared with a name alias.
    • Fix Handling within collections files and folders shared by other users.
    • Fix Adding folders and collections to the download cart from the folder tree menu.
    • Fix Renaming a collections and photo albums multiple times in a row.
    • Fix Shared file/folder name aliases inside collections.
    • Fix Custom user profile image loading when a file accelerator is enabled.
    • Fix Preview image file via weblinks when metadata sharing is enabled but file has no tags.
    • Fix List zip archive contents when the file is inside the trash.
    • Fix Reloading the web page after a search.
    • Fix Highlighting .url (External link) files after creating them.
    • UI Fix Allow mailto: URLs for the help URL.
    • Important UI Change The "One Drive" theme has been removed. The "Corporate" theme will be set instead. If you wish it back, please contact us.
    • Important UI Change The "Download Terms" for web links no longer display in HTML format. If you wish to format the text, you can use Markdown.
    • UI Fix Buttons and title showing weird code when navigating a folder named "includes".
    • Fix Copying direct link to folder from the tree menu.
    • Fix Option to merge PDFs is now shown only when PDF files are selected.
    • Fix Configure FileRun to use client e-mail programs to send web links instead of the built-in email sending. The "E-mail program" button now opens in a new tab.
    • Fix Preventing the FileRun superuser from changing its password with an empty one and getting himself locked out.
    • Improvement More meaningful filenames resulted after merging or extracting pages from PDF documents.
    • UI Fix The options "Share" and "Add to" are no longer shown for items inside the trash folder.
    • UI Fix Getting qr code for multiple shared web links one after the other.
    • Onlyoffice plugin Accessed via mobile opens the editor in mobile mode.
    • Onlyoffice plugin Uses dark theme is FileRun theme is dark. Available in newer OO versions.
    • Onlyoffice plugin Added FileRun control panel options for enabling autosave, chat, comments, compact header and zoom level.
    • API Change Uploading files via the API, using HTTP PUT method, requires that the file's target folder already exists on the server. (Previously, the parent folders where automatically created if needed.)
    • API Change Uploading files via the API using HTTP PUT method no longer support OwnCloud chunking mechanism. Uploading large files via the API, should be done via HTTP POST, which supports FileRun's Flow chunked upload protocol.
    • Fix Not queuing for search index files/folders with very long paths.
    • Fix Sharing failing for files/folders with very long paths.
    • Fix Error importing MP3 metadata under certain conditions on PHP 7.4.
    • Dev Fix "customizables/theme.css" is now last to be loaded, to allow better customizations. This file is no longer included with the free FileRun version.

FileRun Update 20220202 (February 2022)


  • UINew elegant theme "Corporate", with shades of gray and sharper corners.
  • New feature Links to external files and websites. Simply copy/paste an URL, from anywhere, right on top of FileRun, to automatically create a ".url" file. Double-clicking that file opens the URL in a new tab. FileRun will attempt to get the filename or page title from the URL, to use as a filename to identify the linked resource. URL files now have "thumbnails" showing that they are links and the hostname of the linked website. CTRL+V is one option and the other is from the "New" > "Link external file", where you are given a simple prompt to paste the URL with no other options. Tip: paste URLs that you copy from the same FileRun installation, either from the browser address bar or via "More options" > "Copy direct link", to link files between different folders.
  • Important fix Sharing with link or send via e-mail when lacking the permission to share with other FileRun users.
  • Important fix Video and audio playback when opening files in a new tab on Chrome and Edge.
  • Important fix Clicking checkboxes in fieldsets titles in the FileRun control panel while using Safari browser.
  • Important fix Using mouse for single-click selection and double-click folder browsing with primarily-touch device, such as a phone or a tablet.
  • Improvement Added config options for limiting the media library features Photos/Videos/Music to indexing files only from specific folders instead from the entire user's home folder.
  • Improvement Streaming (HTTP range transfer) large media files would now detect if the files have been modified since the transfer/stream started, avoiding potentially broken downloads.
  • UIThe thumbnail display aspect ratio is now constant and can be adjusted from the control panel with options ranging from square 1:1 thumbnails to wide 16:9 thumbnails.
  • Improvement The audio player allows seeking by dragging, with second indicator.
  • "Video Player" PluginGeneral option to loop playback.
  • Improvement Added file type support (thumbnails, plugin support, etc) for files without extension (for example: dockerfile, changelog)
  • ImprovementType support for cfg/conf file for thumbnails and text editing syntax highlighting.
  • UI FixMetadata search field now being displayed when a metadata search is opened from a bookmarked link or from a file's details panel.
  • Improvement Added ffmpeg thumbnail support for MXF files.
  • Improvement Avatars are now SVG so PHP GD library is no longer a requirement.
  • Fix Minor undisclosed security vulnerability.
  • Fix Added support for IIS for the "Office" plugin.
  • Fix Better PHP error handling on failed thumbnail extraction from various formats.
  • Fix Predefined metadata field options containing ampersand characters.
  • UIMoved the "Recent" folder from the top of the menu lower, next to "Starred".
  • UISelected file(s) action buttons are now aligned on the left side of the top toolbar, for easier reach inside folder with just a couple of files.
  • UIShowing group avatars in the control panel and in the file sharing panel.
  • UISet distinguishable colors to the file extension label for common file types.
  • UI FixMore visible autocomplete login form fields on Firefox.
  • UI ImprovementAdded padding for allowing easier selection by click&drag of files and folders in grid mode.
  • UIVarious other smaller improvements.
  • UIUsers editing files via ONLYOFFICE via shared web links have their names prefixed with "Guest" to distinguish from users editing via the FileRun user interface.
  • ImprovementThe option "Copy direct link" is now available also for files and folders shared by other users.
  • Improvement The installer allows you to choose to use an existing database. This would reset the credentials for the FileRun superuser account while keeping all the existing settings and data. It can be used to reset access to a FileRun installation when there is no command line access.

FileRun Update 20220113 (January 2022)


  • Important fix Updating/synching files via the desktop apps.
  • Important fix Text editing on mobile devices.
  • Important fix Downloading files via newly created web links when sending files via e-mail.
  • Important fix Vips failing to generate thumbnails for files with non-latin characters in their names.
  • Important fix Hiding files and folders via $config['app']['hidden_file_names'].
  • Important UI fix Better fit the logo in the main user interface.
  • Important fix Uploading, other file management operations and navigation when the current folder is no longer present in the folder tree, for example when a parent folder has been reloaded.
  • Important fix Admin users, except the superuser, not being able to update web link settings without setting a password.
  • Big improvement Thumbnails for plain text files (such as .txt, .md, etc) and source code files (ex: javascript, css, etc), are now generated almost instantaneously, with no server requirements whatsoever, and no space taking on the server. The text is also very sharp so that you can easily read the file contents and locate the file of interest. Note: the update will not remove the thumbnails already cached for these files and you won't see a difference until you clear the thumbnail cache for the existing text files.
  • New small feature New plugin for viewing EML and MSG e-mail message files. Requires "mailparse" PHP extension for EML files and "msgconvert" for MSG files.
  • Improvement Usernames can now contain the plus character (to allow for alias e-mail addresses).
  • Small improvement Added support for editing TSV, tab-separated values files using the CSV plugin.
  • Small improvement Added yml to be recognized as a YAML file type.
  • UI improvement the transparency pattern when viewing image previews using the dark theme.
  • UI improvement made the copy/move window resizable.
  • UI fix "Copy direct link" and "Control panel" file context menu options are now shown for files under "Photos"/"Videos"/"Music" > "Last uploaded"/"By date"/"By tag".
  • UI fix "Copy direct link" file context menu option is now shown for files under a collection, and under "Starred".
  • UI fix login form fields not visible on Firefox and Safari
  • UI fix Made audio player track bar fit the available space.
  • UI fix opening the audio player no longer makes changes to the grid columns.
  • Fix Character encoding handling for "Text Editor" and "Text Viewer" plugins.
  • Fix Better error reporting when checking for the "vipsthumbnail" binary path from the control panel.
  • Fix WebDrive error saying that there is no available space on the server when "Enable Quota Processing" setting is enabled.
  • Fix Browsing shared folders with many subfolders (more than 100) maintains permissions in the user interface.
  • Fix LibreOffice preview of office files when FileRun runs via Docker.
  • Fix command line script 'cron/empty_trash.php' not working.
  • Fix PHP notice from css/ext.php.
  • Fix A couple of small UI glitches.

FileRun Update 2021.12.07


  • New User Interface

    The entire user interface has been reworked, with high attention to every little detail.

    • Great mobile experience. It adapts to screens of any size to provide a smooth and intuitive experience. Supports touchscreen laptops, handling both mouse and touch selection in the best way.
    • It is now a progressive web app (PWA), so that you can add it to your desktop or mobile phone home screen. (Requires HTTPS access.)
  • New UI options

    • The folder tree panel can be collapsed for more space for the files list. It is particularlly useful when browsing photos in the new "Photo" view, or documents in the new "Large thumbnails" view. The setting is remembered in the browser.
    • Listing files and folders in "Detailed list" now allows you to sort without keeping the list split between folders and files. The option is found under the file list options menu.
    • New display mode "Large"
      • It shows twice larger thumbnails.
      • It displays both documents and photos in full aspect ratio.
      • It shows when an image file has transparency.
      • It is great for brwosing documents and photos.
      • It replaces the previous "Photos" view mode.
    • Filter files by metadata file type. You can leave the filter enabled and continue browsing around folders looking for particular types of files. The Image/Audio/Video file list view modes have been removed.
    • Tags can be added to multiple files/folders at the same time. Simply select multiple items and use the "Add tags" field on the "Details" panel.
    • Multiple files can be star rated at the same time. Just select the desired files and use the star rating option found on the "Details" panel. If any of the selected files already has a rating, its value will be overwritten.
  • UI Performance improvements

    • Direct links to subfolders now open instantly, regardless of how deep the folder is located. Browsing directly to a sub folder no longer loads the parent folders unnecessarily. Yet, it still displays the full location, allowing you to browse parent folders.
    • Uploading folders now updates the folders structure in the tree menu in real time, so you can browse directly to a subfolder that was just uploaded, or that it hasn't even finished uploading!
    • Optimized code for faster display, snappier feeling and less browser memory usage.
    • Creating new folders now shows the new folders in the folders tree menu instantly.
    • Pagination for large folders! The maximum number of files you wish to list per page can be configured from the FileRun control panel. The pagination also applies to search results, so you can now see the full number of results. (Current limitation to be addressed in the future: sorting inside paginated folders is always done in an alphanumeric way by file name.)
    • Very fast thumbnail generation
      • Using "libvips" (https://www.libvips.org) instead of ImageMagick/GraphicsMagick, generating thumbnails can be almost instantaneous for average photo files on average server hardware.
      • The supported file formats are "jpg,jpeg,tif,tiff,png,webp,pdf,hdr,gif,exr,svg". Other file formats would still be processed with your current ImageMagick/GraphicsMagick configuration.
      • The "vipsthumbnail" binary must be installed on the server, and enabled from the FileRun control panel. Make sure you are using Vips version 8.10 or higher.
    • Long file management operations, including calculating a large folder size, no longer lock other FileRun action.
    • Space quotas no longer slow down the login and the loading of the user interface. Refreshing the quota usage no longer blocks other requests.
    • Listing more than 100 subfolders in the folder tree panel no longer loads metadata for the folders, as it becomes too slow to browse. Therefore, in these cases the folders in the tree panel would no longer show if they are shared or if they have notifications or changes.
  • Much improved file viewer

    • Much better image viewing experience.
    • Shows now all files in the list, regardless if FileRun can generate thubmnails and previews for.
    • Faster loading previews for non-image files.
    • If files are selected, the viewer will cycle only through the selected files. Use this to preview only certain files.
    • It now shows if an image has transparency.
    • Added information when previewing an empty file (0 bytes file size).
    • Opening the file viewer no longer disturbs the file list scroll position.
  • Uploading

    • Uploading a folder which contains files or folders with names which are not allowed, automatically skips those files, no longer interrupting the whole transfer anymore for user input.
    • Uploading folders now updates the folder tree in real time. This allows you to browse/manage the uploaded folders before the whole transfer completes.
    • The upload panel shows the file upload speed again.
    • The large Nextcloud uploads no longer show temporary folders inside the user's home folder. The temporary folders are now hidden. Added support for deleting a temporary upload folder by Nextcloud on a failed chunked upload, so no folders are left behind.
  • Usability improvements

    • The list of files is sorted in a more natural way. Sorting is now done in a case-insensitive way, non-latin characters and numbers are sorted better as well. The browser's first preferred language is also taken into consideration.
    • The "Activity" panel
      • The "Activity" tab now shows also own user actions. $config['app']['folder_activity']['show_own'] config option no longer exists.
      • The "Activity" tab now includes the actions made on the folder iteself, when a folder is selected, not only actions made on content.
      • When no file or folder in the list is selected, the activity tab will show all the activity inside that folder and subfolders. The list is grouped by file/folder, so instead of seeing multiple actions made on the same file or folder, you will only see the last action for that file/folder. The number of other actions made is shown.
      • When selecting a particular file or folder in the list, you see all the actions performed on that file, no longer groupped. $config['app']['folder_activity']['show_all_actions'] config option no longer exists.
    • The "Details" panel
      • The details panel is collapsed by default on screen sizes that are not large. It can be displayed using the info button on the top toolbar, or by using the new file context menu option "View details".
      • The preview on the details panel now shows if the image has a transparent background. This helps also identify the image aspect ratio.
      • Added option to change label from the details panel.
      • The details panel shows when the file list is filtered (by audio/video/photos).
      • The "Deleted from" details now links for quickly opening the location an item was deleted from.
      • The "Details" tab now shows the metadata type for the selected file or folder.
    • Thumbnails
      • Thumbnails are focusing the center for photos and the top for documents.
      • Document thumbnail loading is animated, to provide hints on the page size.
      • The thumbnail display mode is now flexible, stretching and shrinking folders and files as needed to use all the available space.
      • Added control panel option for choosing the seek time for the frame selected out of videos for thumbnails.
    • The audio player
      • The audio player no longer closes when leaving the music media library folders.
      • The audio player no longer opens automatically when browsing the music media library.
      • For users who do not have download permissions but they have only preview permission, the audio player now opens directly rather than inside the file viewer.
      • It can now be disabled from the control panel.
      • Added option to disable autoplaying the next file in the audioplayer.
    • Inside the trash folder
      • Files in the trash folder can now be previewd.
      • You can now read comments on files/folders inside the trash folder.
      • The trash folder no longer groups folders at the top, but shows files and folders sorted by deletion date.
    • Increased the text/code editor font size.
    • Added contextual menu option for copying a folder's path to clipboard.
    • Added tooltips on most clickable actions.
    • Dragging files and folders over the "Collections" item automatically expands it to be able to drop into a collection.
    • Added ability to calculate total file size of multiple collections and photo albums together.
    • Better handling renaming current folder.
    • Selecting more than one file to delete now shows a confirmation prompt. This can also be used for deleting permanently instead of to the trash.
    • Added warning when deleting files from outside the home folder or a shared folder in order to prevent accidental deletion from places such as the Starred, Collections or other virtual locations.
    • To prevent accidental file changes, creating a new file from the "+ New" menu no longer allows overwriting existing files.
    • Autosave is now enabled by default for the ONLYOFFICE editors.
    • The Download cart
      • Better feedback adding files and folders to the download cart.
      • Added contextual menu option for adding files to download cart, without having to drag the files from the list to the toolbar menu item.
      • Prevented dragging folders to the download cart without the permission of downloading folders.
    • Keyboards shortcuts
      • Added CTRL+A keyboard shortcut to select all files in the list.
      • Added ESC keyboard shortcut to clear the file selection.
      • Added F5 keyboard shortcut to refresh the file list.
      • The keyboard shortcuts 1-5 for star rating files have been removed.
    • The logo and welcome message are always shown on the login page, even on small screens.
    • Various fixes and improvements regarding toolbars and menu options.
  • The shared links now follow the current theme.
  • The OAuth2/API authorization pages now follow the configured theme.
  • And various other user interface improvements.
  • Photos Media section

    • Photo and video thumbnails show with the actual aspect ratio of the image.
    • The "Photos" media library now shows both photos and videos.
    • The sorting is done by the date the photos or videos were taken.
    • Video files are visually identified by having a play icon on the thumbnail.
    • Image and video orientation detection has been improved.
    • Added support for HEIC metadata import. Requires Imagick PHP extension, enabled from the FileRun control panel.
  • Media Albums
    • Photos and videos can be organized in albums, which work exactly like the regular FileRun collections.
    • Sharing albums with a link, set by default the link mode to gallery.
    • Files and folders can be added to albums from the right-click menu, or by dragging to the left folder menu.
    • Photo albums can include any other types of files and folders.
    • In the future, albums will be shareable with other FileRun users.
  • Improved apps compatibility

    • Desktop Sync Nextcloud
      • Desktop sync can be now used also when the user doesn't have a home folder. Files and folders shared by other FileRun users can be now kept in sync with the desktop sync app.
      • If a user syncs all shares from all users (@Shares) or all shares from a particular user, new shares will get synced as well.
      • Sharing files and folders using links from the desktop now works. Changing permissions of existing shared links and removing links also works.
      • Use the right-click menu "Nextcloud" to get private or public links to the files.
    • Android app Nextcloud
      • Sharing files and folders using links now works. Changing permissions of existing shared links and removing links also works.
      • Previewing various types of files works.
      • You can now add a Nextcloud account to the mobile app by scanning the QR code displayed when generating WebDAV credentials from the FileRun "Account settings" panel.
    • Added compatibility with Synology Cloud Sync.
    • Added support for Nextcloud/Owncloud Thunderbird addons.
    • Tested compatibility with Joplin note-taking app: A FileRun folder can server as a synching source for note taking on various devices.
  • Added "Folder Index" plugin for generating printable indexes of folder contents.
  • Security

    • Fix against CSRF via HTML files opening in the browser, and via MIME sniffing.
      Thanks to Febin Mon Saji (https://www.linkedin.com/in/febin-mon-saji-1787951b1)
    • Improved protection against CSRF attacks.
    • Fixed minor undisclosed security vulnerability.
    • For security reasons, SVG files are no longer used natively for thumbnails and previews, but they get PNG rendered versions.
    • Improved login security.
    • Added option under Password Policy, to enfore two-factor authentication (2FA) on all FileRun user accounts, except guest accounts which they still login using just a link.
    • FileRun is now making sure the session cookies are secure, regardless of the PHP configuration.
  • Other Improvements

    • General server-side speed improvements.
    • Sped up the thumbnail generation process via command line.
    • Adding/changing file/folder labels no longer require download permission.
    • Changing file tags is now logged to the user activity log.
    • Better error handling in the "Index file metadata" folder control panel option.
    • Audio files get year and genre metadata extracted as tags.
    • Web linked galleries now show thumbnails in the natural aspect ratio of the pictures.
    • Comments can be added to the user's home folder.
    • Better error handling on MySQL connection drop while zipping large folders.
    • The metadata autocomplete, such as for adding tags, searches not only terms starting with the typed word, but wider.
    • Added support for ImageMagick being used in Imagick PHP extension mode to the "Create photo proof sheet" plugin.
    • The user accounts created via the authentication plugin can now have a different role associated with them, compared to accounts created via the self-registration procces.
    • Troubleshooting thumbnail or preview generation from the file control panel now keeps the generated thumbnail/preview files, so one can use this to manually request thumbnail generation for a file for which the generation previously failed.
    • New FileRun branding.
  • Fixes

    • Fixed display of checkboxes in file grid when thumbnails are not enabled.
    • Fixed taking into account EXIF orientation when retrieving width and height of images and videos.
    • Fixed creating web links via Nextcloud apps.
    • Fixed regression bug: GraphicsMagick support.
    • Fixed removing password protection from web links.
    • Fixed adding file comments using mobile browsers.
    • File comments can now be added via the media folders (Photos, Videos, Music).
    • The file activity log now shows correct filenames for files in the trash folder.
    • Fixed video player showing full size video via web links.
    • Fixed image editor skewing the images on particular image orientations.
    • Fixed display of login background image when the URL contains ampersand characters.
    • The "Forgot password?" function is now available when using an authentication plugin but having the "Allow local users to login" enabled.
    • Fixed search results showing files that might be in other users trash folders. This happens only when the other user's home folders are located inside the home folder of the user that is doing the searching.
    • Disabling plugins now applies also for the plugins already configured to be used with web links.
    • The option of creating file requests is no longer visible if the user had permission to create web links but now he does not have permission to download files.
    • Files and folders that are shared without alter permissions can now be added to starred.
    • Better handling of zipping folders with large number of items. Better error reporting.
    • Better compatiblity with RSS readers for the folders shared with web link in RSS mode. The file URLs now point directly to the file, rather than the file's preview page.
  • Other changes

    • FileRun installations need to be registered in order to feature custom logos. Unregistered installs will feature the FileRun branding.
    • FileRun no longer works with Internet Explorer. Finally! 🥳
    • The "Default display mode:" can no longer be set to Photos, Videos or Music. The only options are now List, Grid or Large grid. The media views are now reserved for the media library sections.
    • The Zoho theme has been removed.
    • Deprecated $config['app']['ui']['enable_favicon_ico']. Favicons are enabled now by default and can be disabled from the FileRun control panel.
    • Improved debug output for "Thumbnail generation" file control panel action.
    • Updated SimpleSAMLphp plugin description to confirm compatibility with version 1.19.
    • Removed the option of linking the UI logo to a URL.
    • Fixed files showing under Starred when their parent folders were moved to trash.
  • Hidden files and folders

    • Hidden files and folders will still be visible and accessible via the API, WebDAV and apps.
    • Hidden files and folders can be created and uploaded by users, even if they don't show in the list.
    • Downloading a folder containing hidden files and folders, will not include these files.
    • $config['app']['hidden_folder_names'] has been deprecated.
    • $config['app']['hidden_file_names'] applies to both file and folder names and it only hides items in the web interface.
    • Dot files and folders (.*) can be now made visible, using the new option available under the control panel "Interface" section. They are hidden by default.
    • If you want to completely exlude certain file and folder names, you can use $config['app']['excluded_filenames']. Excluded files and folders will not be visible, accessible or manageable by any means.

June 28, 2021 (2021.06.27)


  • Security Fixes
    • Fixed critical security vulnerabilities.
      Security audit by Christian Poeschl and Tobias Braeutigam, from "syntegris information solutions GmbH".
  • Other Improvements
    • ONLYOFFICE can be now used to share documents via web links without download permission (requires enabling from the FileRun control panel).
    • Added API call for extracting archives.
    • Added "-path" option to "cron/make_thumbs.php" command line, to process only a specific folder.
  • Other Fixes
    • Fixed ocassional error while moving larger folders that have versioned files in subfolders.
    • Regression fixes:
      • Uploading via web links.
      • Right-click on files for independent admin users.
      • Alphanumeric sorting in the file grid.
      • Uploading CSV files for user import.
    • Compatibility warning with Nextcloud deskop app.
    • "HTML Editor" plugin security changes:
      • Added option to automatically clean the HTML code before opening files in the "HTML Editor" plugin. The option is now enabled by default, but can be turned off from the plugin's settings. Turn off only if you understand the high security risk involved.
      • The plugin's option to be used for creating new file is now disabled by default. You can manually enable it back by editing the plugin settings.
      • The plugin's option to be used for creating new file is not disabled. You can manually enable it back by editing the plugin settings.
      • The plugin is now disabled by default in new FileRun installations.
    • Fixed exporting activity log when no date is selected.
    • Better handling trying to preview a file after session expired.
    • Fixed image editor not preserving file extension case.
    • Increased timeout for indexing via Apache Tika in server mode from 5 to 50 seconds.
    • Fixed some missing translations.

April 1, 2021 (2021.03.26)


Summary of the most important changes:

  • File plugins can be now used with shared web links.
  • Allow visitors to edit files shared via web links.
  • "Preview without download" permission available for both user accounts or web links.
  • New plugins for spliting and merging PDF documents.
  • Three new themes.
  • Other improvements and fixes
  • Web links improvements

    • The following plugins can be now used to display files shared via web links: 3D Viewer, LibreOffice Viewer, ONLYOFFICE, Office Web Viewer, Zoho, OpenDocument Viewer, Markdown Viewer, Bing Maps, Google Maps, Text Editor, E-book Reader, Markdown Viewer, Open in browser, Video Player, Google Docs Viewer, Link Opener, Audio Player.
      The plugins used for previewing or editing files via web links can be selected from the FileRun control panel section "Files > Plugins > Defaults".
    • A web link to a file can now be shared in 4 different modes:
      • With preview: it opens a HTML page with a preview.
        The preview is generated by the plugin configured for the particular type of files.
        Image Viewer plugin can be used to show previews for non web-safe image files, such as raw images, PSD, etc.
        Important: This is the default way web links open now. Old links that you might have used to embed files into other applications or web sites, would require the following parameter "&fmode=open" appended to them.
      • Open in browser
        Just lets the browser handle the file. If it's a plain text file, a PDF document, or an image file that is supported by the browser, the browser will open it directly. If browsers can't handle the file type, they usually provide the visitors with the option to save the file to their computers.
      • Force download
        The browser will always provide the visitors with the option to save the file to their computers.
      • Editable
        This mode looks similar to the preview mode, but it can use a different FileRun file plugin, that might provide the ability to edit the file. The plugins used with this mode are configurable for the various types of files from the FileRun control panel, under "Files > Plugins > Defaults".
        This mode is available only with the permission to edit the file. This new permission is enabled under the "Advanced" panel when editing the web link.
    • You can now disable the download permission on a link.
      • If you set a preview plugin for the web links, the preview will still be shown.
        The plugins that can handle non-download previews are the same as above.
        If you do not configure plugin previews for web links, they would just show a file type icon with the message that there is no preview available.
      • This works also when sharing entire folders.
    • The "Prevent the browser from opening the file." option is no longer available. If you wish the links to provide the download, select "Force download" option under the web link URL, or append "&fmode=download" to old web links. $config['app']['weblinks']['force_download'] = ['txt', 'csv']; can still be used to prevent the browser from opening files that have the specific extensions (txt and csv for this example).
  • Preview without download


    Users that are not allowed to download files can be now given permission to preview files.
    You can also now disable the download permission on a link which might still allow previewing.
    Available preview options:
    • "LibreOffice Viewer" and "Open in browser" plugins can be configured to allow PDF previews even when the user doesn't have download permissions but has preview permission. The PDF files will open without toolbar, making it difficult (but not impossible!) to save the PDF preview file.
    • "Zoho" plugin can also be configured to allow previewing without download permission. Note though that Zoho allows exporting spreadsheets and presentations from the editor to the original file format, so it does not protect from downloading. For word documents, it allows printing, so that can be used for exporting as PDF.
    • The "Autodesk" plugin allows previews without permission to download the file. This is safe as the original file never gets on the user's computer.
    • The "Audio Player" and "Video Player" plugins can be configured to allow playback of media files without the permission to download the file. Note that this does not keep the original files safe!
    • Other plugins, without download permission, will either show the file's thumbnail, an icon or no preview at all.
    • In the future, more plugins will be able to display limited previews without downloading capabilities.
    • If you do not configure plugin previews for web links, they would just show a file type icon with the message that there is no preview available.
      Very important notes:
    • This is not a safe view-only access to data. There is no such technology. Use this only with non-sensitive data that you do not mind sharing with other people.
    • It is still possible to select and copy text, or extract image data from the generated PDF previews.
    • It is technically possible to extract textual content out of an image preview.
    • It is still technically possible to download/save the generated PDF files to the users computers.
    • For image files of smaller resolution, the thumbnail is the same as the file, so saving the thumbnail to the visitors computers would technically be the same as downloading the original file.
  • Unified file preview

    • Preview all files in a folder, or from a search result, with next and previous buttons. All file types are now included.
    • More screen space for previewing documents and the preview can be made fullscreen.
    • Shows edit option for editable files. (This option shows only when the file type has a default editing plugin configured inside the FileRun control panel "Files" > "Plugins" > "Default".)
  • New plugins:

    • Extract PDF pages. You can extract a range of pages (1-5 or 5-1), or a list of separate pages (1,2,3), or any combination of ranges and separate pages (1, 5-10). The extracted pages can be in separate PDF files or in a combined one.
    • Merge PDF files. Two or more PDF documents can be merged into a new document. The order you select the files dictates the order the pages are copied into the merged document.
    • CSV Editor: edit .csv files in a spreadsheet-like way.
    • Text Viewer: read plain text files more comfortable and with support for the dark theme.
  • Videos can be now browsed through the Videos media library option by the date their were taken and by tags. Date taken and GPS location metadata is now imported from video files, if available. Note that this requires a metadata reindexing.
  • User interface improvements

    • New theme "Google Drive". Similar to the default blue, but flat with white top bar.
    • New theme "Microsoft OneDrive". Flat with square corners, thin and blue top bar, orange folders.
    • New theme "Zoho". Flat with squarer corners, black folder tree, green highlights.
    • Added "Edit" right-click option. This option shows only when the file type has a default editing plugin configured inside the FileRun control panel "Files" > "Plugins" > "Default".
    • Audio files can be opened in the audio player in a new browser tab.
    • Multiple files and folders can be now selected without using the keyboard, but instead using checkboxes that show over their icons when one or more items are selected.
    • You can now configure file plugins to hide the options for creating new files. You can allow users to edit files with plugins such as Google Editor without having the options of creating new documents with this plugin under the "NEW" button.
    • Added dark theme support for Markdown viewer.
    • Various cosmetic and ergonomic improvements.
  • Other Improvements

    • The "Autodesk" plugin now reuses uploaded documents for generating previews instead of uploading the files to the Autodesk server on every preview.
    • Added option to the "Create photo proof sheet" plugin to autorient images.
    • Creating weblinks via API can be now done with all the options available via the user interface.
    • Added DPX and EXR as supported image file types.
    • Added the possibility of creating a new group of users from other groups or from all existing users.
    • The "Image Editor" plugin has now options for adjusting brightness, contrast, saturation and sharpness.
    • The E-book reader now opens the book where you left them. It also provides options for adding bookmarks. Note that information on bookmarks and the last read page is saved in the browser's cache.
    • Downloading a single file now takes advantage of Chromium automatic download resuming, so it resumes the download when the connection gets interrupted.
    • Sped up thumbnail generation for video files by using ffmpeg also for scaling.
    • The Image Viewer plugin, which is used when previewing images via web links can now show small resolution previews for non web-compatible image files. This plugin can also be used to show quick previews for non web-safe image files via the versioning panel.
    • The metadata fields of type "Single value" can be now filed quicker by typing to jump to a predefined value.
    • The metadata fields of type "Small text", "Normal text" and "Multiple values" can be configured with autocompletion, where metadata values from other files are being suggested as the user types in.
  • Other Fixes

    • Fixed opening PDF files and previews in newer Chromium versions.
    • Fixed possibility of downloading entire home folder.
    • Fixed LibreOffice Viewer support for non-Latin characters in file names.
    • Fixed file versions being left behind in the file system after a file is being deleted, either directly or via the trash folder.
    • Fixed reloading current folder on rename.
    • Fixed listing user activity logs for independent admins.
    • Labels and other metadata not showing for files in the search results, when searching just by filename.
    • Fixed deleting metadata file types.
    • Users can no longer create/upload folders with names that makes them hidden (for example folders with names starting with a dot character), nor they can create/upload files with names that makes them hidden (such as ".htaccess", ".DS_Store", or if a custom hidden pattern is configured for the user/group/role). This applies to any method: user interface, API, WebDAV, sync clients.
    • Fixed exporting user activity logs when specifying a date range.
    • The "Link Opener" plugin which allows you to upen .URL (Internet bookmarks) files now opens the links in separate windows, as most websites block frames nowdays.
    • Fixed display of file owner group name under the file control panel.
    • Fixed folder listing when locating a file from the search result when the file is located in the root folder of the search.
    • Fixed display of large lists of file tags in the file details panel.
    • The videos media folder is now hidden for users without download permissions.
    • Collections tree option is no longer shown when the user doesn't have download permission.
  • Other changes

    • New web links that have an expiration date, will expire at the end of the specified day, rather than the beginning. This does not apply to existing web links.
    • Files and folders can now be moved inside a folder shared without download permission. The purpose is to allow file management for uploading files in an organized way, while still preventing the users from moving files from a folder without download permissions to a folder with download permissions.
    • 'Thumbs.db' is no longer a hidden file.
    • The control panel now opens in a new window and its various sections can be bookmarked for quick access.
    • "cron/paths_cleanup.php" can now take the following arguments:
      --deep Cleans all data related to the cleaned/removed file paths. This includes: shares, web links, metadata, comments, labels, stars, file activity logs, thumbnail caches, old file versions, search indexes, previews, etc.
      --aggressive Cleans also files that might exist and are accessible by their paths, but their paths are not perfect (for example, using back slashes or multiple consecutive forward slashes).
      --remove-hidden Cleans from FileRun database files and folders that start with a dot character.
      --path /your/path Limit the process to a particular folder.
    • Deprecated config options: $config['app']['weblinks']['show_page_before_download']

November 21, 2020 (2020.11.21)


  • Improvements
    • Multiple files and folders can be now shared with other FileRun users at the same time.
      Do note that changing the sharing setting for multiple items at the same time, will apply the exact same settings to all files and folders and override any other existing sharing options.
    • Added "LibreOffice Viewer" plugin which can generate browser-friendly previews for Microsoft Office and OpenOffice type documents. The previews are generated on first view, then cached on the server just as thumbnails are, so subsequent previews open without delay. Requires that LibreOffice is installed on the server, and path configured under the FileRun control panel section "Thumbnails and preview".
    • Users can now share files metadata via web links. You can choose to prevent sharing of certain fields, by editing the metadata fields options from the FileRun control panel.
    • Direct links to files and folders can be copied to clipboard via the contextual menu (under "More options..") or from the sharing panel. These links can be shared with other FileRun users that have access to the file, for pointing to a particular file or folder while collaborating.
    • Users can now search for files that have a metadata value equal or larger/lower than a particular numerical value. For example, to list all files rated 3 stars or lower, one would search for "Rating: 3-". To list all files rated 4 stars or higher, one would search for "Rating: 3+".
    • Files and folders can be rated with keyboard shortcuts by selecting one item and pressing a key from 0 to 5.
    • PDF documents are now handled by the browser on the mobile devices. This means that, if the browser can open the file, it will open it directly, if not, it will prompt the user to save the file to the device before opening with a native app.
    • Added "Videos" display mode, which shows only the video files in the current file list.
    • Added "Videos" media folder which lists the videos in the user's home folder, sorted by the date the files where uploaded to FileRun.
    • Added "Last uploaded" section under "Photos". It shows any type of image file sorted by the date it was uploaded to FileRun.
    • Added "[All]" folder under "Photos > By Date > Year" to list all photos taken that particular year, instead of browsing each month separately.
    • A metadata field can now offer multiple predefined options of which the user can select multiple ones. For that, create fields of type "Multiple values" and you will get the option of setting predefined values the user can select from.
    • Added support for uploading high resolution screenshots via pasting even when the server is configured with small upload limits.
    • One user's list of shared folders is now sorted in a natural way.
    • The comments input field is resizable for writing larger comments more comfortable.
    • Improved compatiblity with the latest version of SimpleSAMLphp. Also made it so that local FileRun user accounts can login, as altenative to SimpleSAMLphp SSO. Added an option to import group names returned by SimpleSAMLphp and an option to restrict access to only certain groups.
    • Added control panel option, under "Interface options", to hide the "Download All" button from folders shared by web links.
    • Non-image files now open with their own preview, instead of just showing a thumbnail, under folders shared via web links as image galleries.
    • Opening HTML files in a new tab now adds HTTP security headers to block forms, JavaScript and other HTTP requests, to prevent XSS attacks.
  • Fixes
    • Fixed Office Web Viewer plugin.
    • The "Photos" media library section no longer shows files which are of a different file type than "Photos" or no type. This is to prevent for example a scan of a document to be shown as a photo.
    • Fixed bug preventing users from changing their passwords while 2FA is enabled.
    • File activity log not displaying when browser extensions for ad blocking, such as uBlock, are enabled.
    • Improved handling of short MySQL wait timeouts, causing database connectivity problems when users download larger files or over slow network connections.
    • Fixed login page redirecting to SSO when "Allow local user accounts to login" is unchecked even though SSO is not enabled.
    • Fixed the "Shares" section under a file's or folder's control panel not listing shares on the item itself but only for contained items.
    • Fixed choosing users and groups for sending files via e-mail.
    • Fixed bug preventing users from creating file requests without being password protected.
    • Fixed Zoho Editor plugin error when FileRun user name contains non-Latin characters.
    • Fixed error message while using Zoho Editor plugin.
    • Fixed error when trying to make thumbnails for broken PNG files.
    • Copying and moving files (not folders) inside another user's home folder, from the current user's home folder, now logs the receiving actions, for sending notifications.
    • Added compatibility with Bitly V4 API.
    • When setting manual notifications for "Folder received (via copy)" and for "Folder received (via move)", the messages now include details about the folder name and location and the name of the user that provided the folder.
    • Fixed regression bug: selecting multiple items in the list of files was not updating the details panel properly.
    • Fixed memory limit hitting when running the "cron/paths_cleanup.php" script.
    • Web link records are no longer automatically cleaned if the file/folder is not found. This is to prevent loss of web links in case the storage is temporarily inaccessible.
    • Improved display of Markdown content in comments and from files.
    • Previewing older versions of the same file with ONLYOFFICE now opens the appropriate version.
    • Fixed incorrect space quota calculation, showing wrong information in the user interface and preventing chunked uploads to complete successfully.
    • Fixed possible error regarding failing to create subfolders when a race condition happens when uploading folders.
    • The "Connected apps" section of the personal settings panel is no longer displayed if the API is disabled.
    • Fixed bug leaving empty upload temporary folders when Nextcloud apps are being used to upload larger files.
    • Fixed ability of setting different permissions to different users/groups when sharing a file/folder for the first time.
    • Various smaller UI fixes and improvements.

December 25, 2019 (2019.12.25)


  • File Control Panel
    • It's a per file/folder control panel available only for the FileRun superuser.
    • It provides a central place for retrieving additional information in relation to a file or a folder and provides tools for troubleshooting FileRun features such as the content indexing, metadata extraction and thumbnail and preview generation.
    • The contextual menu option "More options.." > "Index files" is now an option under the File Control Panel.
    • The plugin "Admin: Text Indexer Test" is now an option under the File Control Panel.
    • The plugin "Admin: Thumbnail troubleshooter" is now an option under the File Control Panel.
  • Folder Notifications
    • Added control panel option for automatically subscribing users so that they receive notifications when files, comments or labels are being added inside folders that have been shared with them. The option is available under "Files" > "Misc options".
    • The folder notification options are now split into the following:
      • "New files" -> If the previous option titled "Upload, Delete, Rename, etc." was enabled, it now only covers new files. For getting notifications on deletes, renames, etc. the users now need to manually change the notification options to include the new "Other actions" option. The FileRun update will not enable this automatically for the existing settings.
      • "New comments and labels"
      • "Downloads and previews" -> This is the previous option titled "Download, Preview, Copy, etc."
      • "Other actions"
  • Thumbnails and image preview
    • The generated image previews are now cached on the server.
    • Added option to choose the resolution of the image previews and even allowed image files to be served as they are.
    • Image previews are now loading with lower resolution on non-retina displays.
    • Added support for the IMagick PHP extension for generating thumbnails using ImageMagick when PHP doesn't have permission to run external programs. Useful for shared hosting environments.
    • Additional options for controling the behavior of thumbnail and preview generation have been added to the control panel, under "Interface" > "Thumbnails and preview".
    • Added option to rotate previews in the image viewer.
    • The same preview system and cached images are now also used when previewing images via shared web links opened in "Image gallery" mode.
    • The gallery web links image viewer now supports non web-safe images as well, so you can share folders with raw photographs as galleries that include larger previews.
    • To generate previews from the command line, you can use the script cron> php make_thumbs.php --username admin --size large.
    • Fixed clearing thumbnail cache via the folder properties panel when a custom cache location is configured.
    • Fixed generating thumbnails via command line (cron/make_thumbs.php).
    • If the Google Static Maps API key is set, FileRun will generate thumbnails for GPX files.
  • Authentication
    • Users can now generate additional credentials to be used with third-party WebDAV apps. The option is available under the "Account settings" panel. This is particularly useful when connecting using the WebDAV protocol and your FileRun user account uses 2-Step verification (2FA). (Note that this feature requires the API to be enabled.)
    • Authenticating to FileRun via OAuth2 now works with authentication plugins that use SSO (Single sign-on).
    • Added the possiblity to limit users login to more than one IP address or range. "$config['app']['login']['restrict_ip'][$USERNAME]" can now be an array of IP addresses or ranges.
    • No longer logging failed login attempts when the user is setting up 2FA or being asked for the 2FA code.
    • Failed login attempts made from unauthorized IP addresses are now logged to the user activity log.
    • Failed logins not attributed to a particular user account are now logged as well to the user activity log, under the FileRun superuser account. Paricularly useful to see when invalid usernames are being used or various other errors from a third-party authentication plugin are happening.
  • Nextcloud apps
    • Added compatiblity with the version 2.6 of the Nextcloud desktop app.
    • Fixed synching shared folders with Nextcloud desktop sync.
    • Fixed synching folder renames for Nextcloud apps.
    • Nextcloud desktop app showing avatar on account.
    • Nextcloud desktop app allowing to open a file/folder in the FileRun web UI. (Note that this currently doesn't work for shared items but only for items inside a FileRun user's home folder.)
  • Activity Panel
    • The activity panel is now available for the currently opened folder and also for files.
    • Added config option ($config['app']['folder_activity']['show_own'] = true;) for enabling own actions to be listed in the Folder Activity panel.
    • Added config option ($config['app']['folder_activity']['show_all_actions'] = true;) for disabling grouping of actions in the Folder Activity panel by file.
    • Fixed functionality of the "Folder Activity" panel when enabled for shared folders.
  • User Interface
    • The default view mode using for web links can now be changed from the control panel (Interface > Options). Changing the default mode affects all existing web links, unless they were specifically shared with a view mode other than the default one. Web links that were shared with the parameter "mode" in the URL will not be affected.
    • Added file size information for the files shared via "List view" links.
    • The width of the folder panel is now being remembered on the same computer accross sessions.
    • Links to files from the e-mail notifications are now opening the FileRun user interface with highlighting the file.
    • Enabling/disabling or making changes to the FileRun plugins no longer requires users to clear their browser's cache in order to see the change.
    • Clicking a file's label in the details panel will search the current folder for all files with that label.
    • Clicking to "locate" a file from a search results it now closes the search panel, instead of performing another search inside the found file's folder.
    • Text from the Control Panel grids can now be selected for copying.
    • Fixed bug causing the file list to scroll up when clicking next to a file.
    • The text editor now allows copying, pasting and text selection on mobile devices.
    • Making any changes to metadata fields, field sets or file types will reflect immediately, without the users needing to clear their browsers' cache.
    • You can hide the list of system default metadata file types (Audio, Documents, Photos, Videos) in the metadata file type search by setting "$config['app']['metadata']['search']['exclude_system_filetypes'] = true;".
    • You can hide the list of system default metadata fields (the ones that belong to the "Audio", "Documents", "Photos", "Videos" file types) in the metadata file search by setting "$config['app']['metadata']['search']['exclude_system_fields'] = true;".
    • The metadata fields with predefined lists of values now offer the user the option of setting no value.
    • Metadata field sets are now sorted alphanumerically based on their names.
    • The metadata field type "Date/time" now shows a calendar for choosing a value. The field expects the format "2019-01-29 23:59:59".
    • Fix: The login form no longer moves out of the screen when typing in credentials on mobile devices.
    • Fixed "Open with.." > "New tab" to allow multiple files to be left opened at the same time.
    • Fixed Autodesk plugin opening in a new window.
    • Fixed avatar letters being wrong in some cases.
    • Fixed downloading file from the image viewer by pressing the Enter key.
    • Fixed group avatar when group name contains multibyte characters (non-latin characters)
    • Fixed: keyboard shortcuts on Firefox (non-Windows).
    • Fixed sharing panel UI glitch preventing users with long names to be removed from a share.
    • Fixed folder notification messages to include users' full names.
    • Various other small UI improvements and fixes.
  • Other Improvements
    • Added control panel option for disabling/hiding the "Collections" feature. This applies system-wide.
    • The ONLYOFFICE plugin is now available for all filetypes support by ONLYOFFICE, rather than only the common office documents. The full list is the following: "doc", "docx", "dotx", "odt", "ott", "rtf", "txt", "pdf", "html", "epub", "xps", "djvu", "xls", "xlsx", "xltx", "ods", "ots", "csv", "ppt", "pptx", "potx", "odp", "otp".
    • The ONLYOFFICE plugin supports JWT authentication.
    • The ONLYOFFICE plugin no longer autosaves changes. The user needs to click "File" -> "Save" or use the keyboard shortcut for the changes to be saved to the document.
    • Change: the upload chunk size is no longer limited to a max of 20MB but instead it is determined automatically based on the PHP configured "upload_max_filesize" and "post_max_size" (the smallest of these two values). This has two important consequences. One is a potentially negative one, smaller files will be reuploaded from the start if the transfer is interrupted or paused (interrupted downloads are being resumed from the last uploaded chunk). The second consequence, is a positive one, with large files uploaded over fast connections will be uploaded much faster than before (particularly noticeable in local networks). The chunk size can still be manually using '$config['app']['upload']['chunk_size']' (see https://docs.filerun.com/advanced_configuration).
    • Changing a folder's notifications options is now logged to the user activity log.
    • Adding/removing a user to/from a group is now logged to the user activity log.
    • Sending files/folders via e-mail, using web links, now logs the action of creating the web link.
    • Saving changes on a web link's settings is no longer logged as an action if no changes were actually made.
    • $config['app']['email_notification']['per_item']['limit_actions'] is an array containing a list of actions that notifications are being triggered when using per folder notifications.
    • Apache Tika in server mode now requires version 1.22.
    • Added options for enabling file indexing for image files and scanned PDFs through OCR. It requires Tesseract. For more informatiom please see https://docs.filerun.com/file_indexing
    • Added option for loading a configuration file for Apache Tika.
    • The text editor can now open GPX and KML files, with XML code highlighting.
    • E-mail notifications for uploading and downloading empty files are no longer instant. This allows users to create new text files and add content to them without having too many notification messages being sent about the particular activity.
    • The control panel export function for the user activity logs search results is now triggering a file download rather than saving the file in the superuser's home folder. The activity details are now json encoded.
    • Added API method for changing the password.
    • Added possiblity of specifying additional options for connecting to the MySQL database by editing "system/data/autoconfig.php" and adding the 'options' element which lists PDO predefined constants.
    • File or folder names that end with a space or a dot character are no longer allowed.
    • Users with the permission to share files with other FileRun users can now share their entire home folders.
  • Other Fixes
    • Fixed: Removing a user from a group leaving behind settings attached to files/folders shared with the group.
    • Fixed: Removing a user from a shared folder leaving behind settings attached to the files/folders. For example, per-folder notifications enabled, having the users that no longer have access to the shared folder to still receive related notifications.
    • Fixed regression bug: superuser not being able to assign users or groups using the "Can interact with" permissions.
    • Fix: allow "memory limit hitting fatal error" to be logged to the PHP error log when trying to process Exif data from very large files.
    • Fix: FileRun no long attempts to read Exif data from PSD/PSB files.
    • Fixed compatiblity with the newer Autodesk API to allow opening CAD files.
    • Fixed problem with browsing shared folders with certain WebDAV programs.
    • Fixed PHP warning when importing users via CSV.
    • Fixed PHP error (Call to undefined function FileRun\Utils\xdebug_get_function_stack() ..) when installing FileRun updates.
    • Fixed extracting tar.gz archives.
    • Fixed "cron/metadata_index.php" not processing all users when ran without paramaters.
    • Fixed delay in reflecting changed control panel settings when PHP OPcache is enabled.
    • Fixed error when accessing collections that are supposed to contain files that were removed from outside FileRun.
    • Fixed problem with HTML characters typed in the message when sending files via e-mail.

July 01, 2019 (2019.06.01)


New features:

    • 3D model file support
    • Added 3D viewer with support for: OBJ/MTL, STL, FBX, DAE, X, GLTF/GLB, 3DS, 3MF.
    • It supports external resources (texture files located in the same folder).
    • It provides the option of saving screenshots from the renders.
    • Added icon and file type description for various 3D model files.
    • Added option to use https://github.com/unlimitedbacon/stl-thumb for generating thumbnails for STL 3D models.
  • Added back the download cart. It is hidden by default and it can be enabled from the control panel, under "Interface" -> "Options".
  • Added the possiblity of setting custom icons to specific folders. See this page for more details.

Fixes:

  • Fixed several medium and low risk security vulnerabilities.
  • Regression fix: Sharing as a link a sub folder of a shared folder would share the parent folder instead. (The current FileRun version has been patched shortly after release.)
  • Added "index.html" files to prevent web servers from listing various FileRun application folders.
  • Fixed emojis in filenames affecting thumbnail display mode.
  • Fixed PHP warning when FileRun user is changing own password.
  • Fix: Simple admin users unable to change passwords for the existing user accounts.
  • Fixed folder listing sorting in the main UI.
  • Fix: Filename with non-ASCII characters on file download on Edge.
  • Fix: Form field sizing in the "Options" panel of the "Web Link" panel, on non-English translation, making last field inaccessible.
  • Better handling of non-ASCII characters for generating user avatars.
  • Fixed the progress bar UI on the upload panel.
  • Fixed various UI glitches.
  • Other changes
    • Change: Due to security reasons, FileRun no longer allows filesystem paths/filenames that contain the < or > characters.
    • To prevent getting locked out, the superuser account now has 20 failed login attempt until the account is locked, regardless of the settings for the other user accounts. Make sure you set a secure password for the user account.
    • Behavior change: Closing the "Web Link" panel using the "Done" button no longer copies the URL to clipboard. Users have to press the "Copy" button instead.
    • Added field for setting the name e-mail notifications are being sent from.
    • Added informative notification when assigning the same home folder path to more than one user account.

  • May 22, 2019 (2019.05.21)


    Important notes

    • Making a backup of the FileRun installation before installing updates is highly recommended. Read here how.
    • The minimum required PHP version for this update is 7.1. For best performance and security, we highly recommend PHP 7.2 or 7.3. The PHP versions 5.6 and 7.0 reached end-of-life from PHP developers, which means no security updates are being released for them. For the safety of your data, FileRun no longer supports them either. (Please see this guide for upgrading to PHP 7.1+.)
    • This update breaks compatibility with the FileRun Android app, which will need updating. Please note that a compatible FileRun Android app might not be yet available.
    • Using the desktop sync apps or the Nextcloud Android app is now requiring the FileRun API to be enabled. Read here how to enable it.
    • After this update, the default language will be set to "English" and the installation will have no translations. The translation system has changed and any files previously uploaded to "system/data/languages" will be removed by this update. For adding translations, please see: https://docs.filerun.com/translating_filerun
    • Users without the permission "User can make changes to files and folders", can no longer make copies of files/folders, even if they have the "User can upload files and folders" permission.
    • The config option "$config['app']['thumbs']['output_small_filesize']" changed to "$config['thumbs']['output_small_max_filesize']".
    • The configuration option "$config['app']['ui']['custom_css_url']" is no longer active or available. For customizations, please create the file "customizables/theme.css" and enabled it from the control panel under "Branding".
    • The download cart feature has been removed. Please use the new collections feature or the starring feature to achieve the same.
    • The "Creative Cloud" and "Pixlr" plugins have been removed as the services have been discontinued by their developers.

    New features

    • Collections

      • Files and folders can be added to virtual folders called collections.
      • Same file or folder can be added to more than one collection.
      • Entire collections can be downloaded with a single click.
      • Multiple collections can be downloaded at the same time with a single click.
      • Collections can be dragged into each other to add items from one collection to another. (The original collections will still preserve the same items.)
      • Collections can be shared using web links. All options still apply:
        • You can share the collections as image galleries or audio playlists, password protect the access, etc.
        • You can enable file requests (ie. allow uploads from visitors), and all the folders contained in the collection will allow uploads. If the option "Allow visitors to see and download the existing files." is not enabled, the visitors will not have access to the folders contents, but only be able to upload new files.
      • Files and folders can be renamed or moved, yet they will still remain in the collections to which they were added.
      • Pro tip: use the search to locate files of interest, and add them to a collection, right from the search result.
      • Pro tip #2: Share the same file/folder via multiple weblinks with different options, by placing them into collections and sharing the collections instead.
      • Note: Collections can currently only contain files and folders from the user's own home folder and not from folders shared by other users.
    • Image editor

      • Basic functionality: resize, crop, rotate, flip.
      • Has no third-party requirements.
      • All types of image files can be opened, as FileRun will convert the data format if necessary. Note, very large image files will be converted to a maximum resolution of 4000x4000 pixels. Editing a RAW image file, for example, will save the edited version as a separate JPG image.
      • Can be used to convert various images file formats to JPG.
      • The image viewer has a button shortcut for opening the current image in the editor.
    • Added Laravel authentication plugin.

    • Added dark theme.

    • PDF documents can be edited with Google Docs Editor.

    API

    • Added API method for removing web links (http://docs.filerun.com/api#removing_web_links).
    • Fixed weblink information when listing via the API files and folders with weblinks.w
    • The API endpoint user/info provides now also information about the user's permissions.

    Various

    • Many performance improvements, making FileRun significantly quicker to load and react.
    • Added compatibility with latest Nextcloud Android and desktop apps.
    • Added configuration option for the LDAP plugin, to limit access only to users that are members of particular groups.
    • The activity logs for files and folders can now be checked also for items from the trash folder.
    • User Interface

      • Improvements for mobile browser access:
        • The default display mode is "Detailed list" and the control panel set display mode applies only on large screen devices. The user can still change the display mode at any time.
        • All inner popups open full screen. Users can rotate device to landscape for better use of wider content.
        • Increased various text and element sizes for better accessibility.
        • Improved the image viewer's details panel.
        • Fix size of the Android app login prompt.
      • Added support for LibreOffice for generating thumbnails for office documents, including plain text files and HTML. (https://en.wikipedia.org/wiki/LibreOffice#Supported_file_formats)
      • Added breadcrumbs navigation which shows the path of the currently browsed folder and provides a quick way of browsing to the parent folders.
      • Added blank theme for custom themeing.
      • The custom theme file now loads on top of the selected color theme. To customize an existing theme, enable the option "Apply "customizables/theme.css"" and create the file "customizables/theme.css" where you write your custom CSS code.
      • Target folder selector
        • Shows a small window for browsing existing folders for performing various actions.
        • It is used for copying or moving files and folders. The copy/paste option has been replaced by this feature.
        • It is used also for extracting archives to specific locations.
      • The web page's title gets updated based on the browsed folder. This helps identify between multiple opened tabs and improve bookmarking.
      • Thumbnails
        • Narrower thumbnails are now displayed from the top instead from the center. This makes identifying text documents easier.
        • File icons are now monochrome, to better distinguish between system icons and thumbnails.
        • Improved browser caching for thumbnails sent out from original file contents.
        • Improved the loading speed from the server for cached thumbnails.
        • Thumbnails are displayed now also for very small image files (smaller than 1KB). This is useful for small SVG icons, or plain text files without much content.
        • Better cache handling for files that thumbnail generation fails or provides no output. For example, FileRun tries to generate cover images for MP3 files. Before, even if a file wasn't having one, the server was looking into the file for one, every time the user was listing the file. Now it doesn't.
        • Small SVG files no longer employ ImageMagick for thumbnail generation but instead they are displayed natively.
        • Default thumbnail size has been increased from 140 pixels to 170.
        • Added lazy-loading for thumbnails displayed via weblinks.
      • Searching: choosing a metadata field that has a predefined list of options now shows the actual list to the user.
      • The refresh button is now on the top toolbar, for easier access.
      • The meta-icons have been moved to allow longer file and folder names to display better.
      • Added keyboard shortcut "n" (or "N") for creating a new folder.
      • The "Locate" context menu option now shows for items in the search result.
      • Failed actions now show a red colored message in the left-bottom corner of the screen, to inform the user that there was a problem.
      • Restoring files from trash updates only the changes instead of reloading the trash file list.
      • Added option for (calculating and) viewing folder sizes.
      • Dragging files up and down the grid automatically scrolls the list.
      • Added automatic scrolling when dragging items to the folders tree.
      • Dragging folders from the tree panel is no longer enabled to prevent accidental folder moves. Moving folders is now done only by dragging from the grid.
      • When dragging files and folders around, it's now clearer to see what files/folders are being dragged.
      • Fix: the rating and tags widgets are no longer displayed for users that do not have permission to access metadata.
      • Fix: file list scroll when playing an audio file from a display mode other than "Music".
      • Various other interface improvements and fixes.
    • Desktop sync
      • Fixed uploading new files. The error message was "The server did not acknowledge the last chunk. (No e-tag was present)".
      • Fixed uploading files inside the home folder (@Home). The error message was "Not allowed because you don't have permission to add files in that folder".
    • Added option to preview old file versions. Versions open in separate browser tabs for easy comparison. They open with the default configured file preview method. If the default file preview method is an editor, saving changes will not update the old version, but it will save it as the current version.
    • Files can be permanently deleted (skipping the trash folder) by holding the shift key when performing the action.
    • Security: The option "Maximum login attempts" applies now also when a third-party authentication plugin is in use, preventing brute force attacks.
    • The admin users can now reset a user's 2-step verification. Useful in case of lost devices.
    • Fix: removed limitation on number of users and groups that can be listed inside the "Can interact with" user permission.
    • Fix: loading high-res version of images in folders with single quote characters in their names.
    • Fix: adding files to an existing Zip archive no longer resets the archive file, so weblinks and other metadata already attached to the archive get preserved.
    • Fix: extracting files from a Zip archive, if they overwrite existing files, it no longer resets the target files, so weblinks and other metadata already attached to the existing files get preserved.
    • Fix: The option of sharing a web link via QR-code is now enabled by default. (The optional config "$config['app']['weblinks']['showQRCode']" is now called "$config['app']['weblinks']['hideQRCode']".)
    • Fixed "User info HTTP method" option not being taken into consideration for the OAuth2 authentication plugin.
    • Fix SSO not setting a CSRF token causing users to be unable to delete files or the admin to make changes in the control panel. Affects only the cases where "Inactivity timeout" is set to 0.
    • Fix ImageMagick crash when $config['imagemagick_limit_resources'] is enabled.
    • Added plugin for troubleshooting the thumbnail generation process. The plugin is available only to the FileRun superuser and disabled by default.
    • Added config option $config['app']['enable_catch_all_event']. Set to true, will have FileRun look for "customizables/events/catch-all.php" and run it every time a user performs an action.
    • Fix: trying to move a folder to the same location ends with an error message instead of renaming the folder to "Copy of ..".
    • Improvement: when a file/folder move attempt fails, the user now gets to know to which of the selected files/folders the returned error refers to.
    • Fix: error listing user accounts when the option "Inactive accounts" is set to "Do not delete" under the guest user settings.
    • Improvement: when trying to empty the trash folder, if there is an item with errors, the operation will continue with the remaining of the files rather than stop there.
    • Fix: user self registration process wasn't registering the user details (Phone, Company, Website) correctly.
    • Raw image files 'cr2', 'mos', 'mef', 'nef', 'arw', '3fr', 'iiq', if they don't have an XMP sidecar file, are processed as TIFF for extracting basic Exif data (width, height and date taken).
    • Added 'webp' image file format support and it is handled as a web-safe image (just as JPG or PNG). Note that at this time, Safari, the old Internet Explorer, the old Firefox versions and Edge versions 12-17, do not support this file format.
    • Fixed error message when trying to import users from a file without mapping both first and last name columns.
    • Added AIF, AIFF, 7Z, DCM as recognizable file formats.
    • Removed FLV and SWF video playback support.
    • Fixed full-screen on EPUB reader on Chrome.
    • Added support for vertical languages EPUB books.
    • 'file.download' hook has been renamed to 'file.read'
    • 'file.upload' hook has been renamed to 'file.write' and it executes before the file is write but after all the needed information has been collected (does not include file contents data). To target particular types of file writing, there are the available hook names "file.write.string", "file.write.upload", "file.write.move", "file.write.copy"
    • Other changes
      • File downloads (regardless of method - which includes opening a file in the browser for viewing, previewing a bit of a media file, etc.) no longer logs the action to FileRun's activity logs and the per-file activity logs, unless the very end part of the file's contents has been transfered from the server to the client. This is done to avoid thousands of log entries caused by Firefox and other browser that might make very large number of small partial requests when downloading a file. This change means that if a user opens an audio file or video file and doesn't wait until the entire file gets downloaded, the action will not be logged on the server. If this is not a desired behavior for your particular use-case, you can change back to the previous behavior, by adding "$config['app']['logging']['partial_downloads'] = true;" inside "customizables/config.php" (http://docs.filerun.com/advanced_configuration
      • The config options "$config['app']['api']['oauth2']['allow_over_http'] = true;" is no longer available, with the option now added to the FileRun control panel.
    For a list of changes prior to 2019, please contact us.
    The automatic software update system was introduced on January 17, 2008.

    Privacy policy