Changelog

« Back to the list

FileRun Update 2024.1.0 (May 2024)

• Highlights

  • Refreshed user interface with better ergonomics, improved keyboard accessibility and better mobile experience (including for the control panel).
  • Many fixes and smaller improvements (the list bellow is not comprehensive).
  • Under the hood:
    • The UI library has been reworked from the ground up.
      While more capable than before, it renders up to 50% faster than before on the first load, paving the way to using the same feature-rich interface for shared web links (coming later this year).
      It will allow FileRun to soon meet the WCAG 2.2 standard of accessibility.
      The improved modular structure will make development several times faster than before while preventing regression bugs. This means more frequent updates, and of higher quality.

• Important fixes

  • Fixed creating user accounts via the API.
  • Fixed differentiating between files/folders with similar name but different accent on one or more letters, located inside the same folder. For example, trying to share a folder named "FíleRún" next to a folder named "FileRun" would share the wrong folder, "FileRun".
  • The option "Allow visitors to download this file." did not work correctly.
  • Fixed file/folder name containing non-UTF-8 characters preveninting desktop sync and access via WebDAV.
  • Fixed WebDAV compatibility with clients requiring "resourcetype" for files.
  • Fixed preservation of file/folder name containing non-UTF-8 characters when downloading. This issue manifested so far only with Turkish characters. Make sure PHP is configured with default_charset = "UTF-8" (it's the default setting).
  • Security fix: prevent cached URL to be changed by HTTP Host header attacks.
  • Fixed showing thumbnails via Nextcloud desktop sync.
  • Fixed ocasional "Loading..." screen after update (when URL changes). - https://feedback.filerun.com/communities/1/topics/1936-loading-after-upgrade
  • Fixed bug allow one user to share via link a folder shared by other user without the sharing permission.
  • Fixed ability to send files by e-mail from shared folders.

• UI & UX

  • Better UI responsiveness to ensure the file list is never squished.
  • Reorganized the contextual menu, for better ergonomics.
  • Folders can be now mixed with files for sorting in all views.
  • The non-photo files now maintain their regular thumbnail looks when listed in a photos layout mode.
  • Back/forward works as expected when opening files in the viewer.
  • Direct links to files open the files in the file viewer.
  • Texts which show an ellipssis because they do not fit for display, now show tooltips.
  • Much improved usability of the control panel, both desktop and mobile.
  • Many improvements to the image viewer related to zooming and panning. You can double-tap/click to quicly zoom in and out. Added animation for swiping.
  • Windows can be dragged using the finger on touch screens.
  • The folder tree panel can be resized using the finger on touch screens.
  • Added dark-mode support for the OpenDocument Viewer.
  • Made the file viewer open full width.
  • You can now search for groups as well, when sharing files with other users.
  • Made the control panel theme editor expanded by default.
  • The "Welcome message" on the login form is no longer limited in height. It is now displayed in full without having to scroll.
  • Fix top horizontal toolbar not wrapping when changing the file/folder selection.
  • Fix: Missing toolbar from text editor.
  • Fix: Removed border radius from login page foot section. It was clipping the text.
  • Fix: links colors on dark mode, being too dark.
  • Fixed folder icon color on dark mode, when sharing folders via web links.
  • Fixed 2FA QR code scanning on dark mode.
  • The scrollbar is now always shown on form components listing users and groups in the control panel, to make it obvious that there are more records.
  • Fixed background playback of video adjacent to clicked item in web linked gallery (https://feedback.filerun.com/communities/1/topics/1883-web-share-gallery-view-video-audio-starts-playing-when-neighboring-image-clicked)
  • Detailed/Compact list
    • The filename column now remembers its custom width after reloading the page.
    • Swapped positions between "Modified" and "Size" grid column.
    • Fixed horizontal scrollbar showing unnecessarily in the file list after Chrome update.
    • Fixed horizontal scrolling reset when selecting a file.
    • Made dragging autoscroll faster and smoother.
    • Smoother horizontal scrolling of the columns headers.
    • Optimized the first render speed.
    • The menu for choosing columns has been moved from the header bar next to the refresh button.
    • You can now order the file list by a column regardless if the column is visible or not.
    • No longer resetting horizontal scroll when changing pages.
  • Fixed new folders now showing in the tree folder after creation when the current folder does not have other subfolders.
  • Increased size and contrast on the icons showing files/folders linked/shared/starred/etc status.
  • Aligned the above-mentioned icons next to the filenames in the detailed/compact display mode.
  • Selecting a file/folder in the thumbnail mode no longer hides the icons and tags.
  • Fixed missing margin space between bottom of screen and the left-bottom menu on mobile.
  • The "Select users" prompt can be now dragged and resized.
  • For narrower screens, when dragging tags from the details panel, the various open panels which might be opened are automatically hidden so that you can continue dragging tags to files/folder.
  • Fix: removing files and folders from a collection, now removes them from the list.
  • Added option for opening the default file preview in new browser tabs.
  • When the file extension is shown as a grid column, is now omitted from the file name column.
  • Fixed not showing "Save changes" button when editing the plugin "Open in browser".
  • Various code optimizations for faster loading.
  • Optimized fonts icons to save bandwidth.
  • Various minor cosmetic improvements.
  • Fixed copy to clipboard on Safari and Firefox.
  • Added transparent background to the file viewer when viewing TIF/TIFF files.
  • Made tags look cleaner in the tree panel and navigation breadcrumbs.
  • Fixed the "Detailed list" vide mode in "Collections" and other sections which are not listing real folders or lists of files.
  • Theme shape size changes are getting saved but new values do not have effect.
  • Fixed login form width when title is very long.
  • Added top toolbar option for downloading file collections.
  • Prevented flash of white screens on dark mode under the control panel.
  • You can now choose multiple files to preview in new browser tabs.
  • Improved the layout of the search panel and made it more usable on mobile.
  • Fixed calculating total size of a collection when it contains both folders and files.
  • Fixed display of colorful tags under the "Videos" media library section.
  • Much improved focus + keyboard navigation among the various UI elements. Along with tab/shift+tab, you can also use left/right or up/down to change selection between menu item, toolbar items, tabs.
  • Many usability imporvements on mobile devices.
  • Improved highlight of menus and other floating surfaces on the dark theme.
  • You can open multiple metadata panels at the same time, either for comparison or for copying data from one file to another.
• Added control panel options for deactivating and/or deleting user accounts after a predefined number of inactive days. It can be found under "Users" » "More".

• Authentication

  • The password reset function can be now used by the FileRun superuser to reenable the acount if it was blocked due to a brute force attempt.
  • Authentication sessions are now preserved if a username changes.
  • Fixed unauthenticated username enumeration vulnerability.
  • Fixed connecting ownCloud with an app password instead of the FileRun account credentials.
  • Added settings for disabling the synching of groups from the remote authentication.
  • Removed background image from the authentication settings test result page.
  • Fixed warning regarding the need to set a role when trying to save "Authentication" settings changes when no plugin is enabled. - https://feedback.filerun.com/communities/1/topics/1936-loading-after-upgrade?redirect_to_reply=7749#comment-7749
  • Fix redirect after external login.
  • Fixed blank page in Authentication settings (PHP Fatal error: Uncaught Error: Class "FileRun\Auth\Custom\Oauth2\Plugin" not found).
  • The login flow no longer recommends a particular 2FA app and is now showing the secret code for manual copying to the 2FA app.
  • LDAP
    • Fixed group assignment for users when importing from LDAP/AD.
    • Fixed synching users from LDAP/AD specific groups.
    • Better error handling when using LDAP auth with two Search DNs.
    • Made LDAP authentication always retrieve the user's bind DN from the server rather than using the "User DN template", which is now used only for binding directly with the user credentials. This should fix authentication against Active Directory.
    • Better error handling when the LDAP authentication integration is misconfigured without either a "Bind DN" nor a "User DN template".
    • Fixed PHP error when setting the option "Use LDAP-MATCHING-RULE-IN-CHAIN to retrieve nested groups:" to "yes". - https://feedback.filerun.com/communities/1/topics/1970-ad-authentication-not-working-after-update
    • The "Groups to allow access to" no longer need to be included in the "Groups to import" list.
    • Better performance when authenticating when access is limited to certain LDAP groups.
    • Added option to test the import directly from the control panel. The option "Enable debugging" no longer needs to be enabled (which could cause troubles to users trying to login while the admin is troubleshooting)
    • Made the LDAP/AD bind password hidden when not editing. Made the LDAP/AD "Groups to import" and "Groups to allow access to" fields larger.
    • Added option for a second LDAP/AD search dn.
  • SimpleSAMLphp
    • Regression fix after 2023.1.0
    • Fixed importing group names with correct case from SimpleSAMLphp.
    • Fixed authentication with SimpleSAMLphp when limited to certain groups.

• User registration

  • Fixed PHP error when using the user signup system, preventing the user from receiving proper feedback from the process.
  • Fixed JS console error message on the user signup page when Captcha is disabled yet unconfigured.
  • Added logo on the user registration page.

• Other fixes

  • Markdown rendering of text lines.
  • Error after deleting a translation file which is in use.
  • Video playback not stopping after closing file viewer. Other type of content would also stay open in the background using memory.
  • Large download resuming or video streaming hitting PHP memory limits on certain server configurations.
  • Using Tika in server mode.
  • Accessing ONLYOFFICE with "JWT secret".
  • Error handling on invalid HTTP_IF_MODIFIED_SINCE values on downloads.
  • Error handling when "Number of days users can use the same passwords" does not have a valid value.
  • Fixed saving changes to documents via ONLYOFFICE and Zoho.
  • Fixed file conversion via the CloudConvert plugin.
  • Fixed ownCloud client warning about connecting to an unsupported server.
  • Tested with Nextcloud desktop 3.82. Tested with ownCloud desktop 4.0.0.1.
  • Fixed compatibility with sendmail which requires header lines to end with CRLF. It fixes e-mail notifications when they might show raw HTML tags in the message.
  • Added control panel option for manually running e-mail notifications. Useful for troubleshooting notifications when the option "Instant email notifications" is disabled.
  • Fixed control panel activity log records showing "[Nonexistent share]" in some shared paths.
  • Fixed errors when trying to send e-mail notifications via the command line. (https://feedback.filerun.com/communities/1/topics/1889-php-fatal-error-emails-notifications-command)
  • Added control panel option for troubleshooting e-mail notifications based on a selected activity log entry.
  • Fixed error in trash folder (https://feedback.filerun.com/communities/1/topics/1894-accessing-trash-returns-failed-to-load-file-list-there-is-a-server-internal-error-http-code-500)
  • Fixed user avatar in the Nextcloud/ownCloud apps when signing in with a WebDAV password instead of the main credentials.
  • Added warning regarding running PHP with memory_limit set to -1
  • Fixed error reporting when troubleshooting the thumbnail generation.
  • Fixed error while parsing certain PSD files for metadata. (https://feedback.filerun.com/communities/1/topics/1644-metadata-update-file-type-on-psd-gives-uncaught-errorexception-fread-length-parameter-must-be)
  • Fixed error when trying to save changes in the image editor on a shared file (https://feedback.filerun.com/communities/1/topics/1921-edit-photo-leads-to-error-when-i-am-not-owner)
  • Made text editor show the detected character set on first load (https://feedback.filerun.com/communities/1/topics/1845-filerun-update-202310-bug-reporting-and-patch?redirect_to_reply=7542#comment-7365)
  • Fixed searching inside shared folder. (https://feedback.filerun.com/communities/1/topics/1903-guest-user-searching-with-tags?redirect_to_reply=7544#comment-7544)
  • Fixed PHP error when accessing folders shared via web links with "Download Terms". - https://feedback.filerun.com/communities/1/topics/1955-download-terms-make-weblinks-for-folders-invisable
  • The setting "Force users to access via HTTPS." has been removed. Allowing your web server to satisfy requests via HTTP should not be allowed in production and FileRun will no longer accomodate insecure server configurations. Please make sure the redirect from HTTP to HTTPS happens at the web server level (.htaccess).
  • Removed no longer necessary requirement check for the session.save_path
  • A few small error handling improvements.
  • Fixed TinyMCE integration (https://docs.filerun.com/tinymce) - https://feedback.filerun.com/communities/1/topics/1953-tinymce-plug-in-issue
  • Fixed "tag_removed" event's data. - https://feedback.filerun.com/communities/1/topics/1871-tag-removed-event-not-working-as-expected
  • Added command line script for listing, deactivating or deleting inactive user accounts. It can be used interactively or as a scheduled task. (cron>php manage_inactive_users.php --days 30 --action list/deactivate/delete)
  • Fix requirement check in the installer, incorrectly looking for "zlib" instead of zip PHP extension.
  • When the guest user access is disabled, the guest user accounts are now shown as deactivated in the list of users.
  • The guest user account inactivity deletion period setting has been moved from the "Security" section to "More", under "User account retention policy". It is now defined in number of days.
  • Fixed showing a correct "Guest access URL" for user accounts that were assigned to Guest role but did not have a password set.
  • Fixed "Loading.." message when listing folders under "Starred" when trying to move a file/folder and there are no starred folders.
  • Uploading a translation file automatically removes non-alpha characters from the file's name.
  • Fixed thumbnail/album cover not being extracted from audio files where available.
  • Fixed accessing metadata of file with a single quote in the name.
  • Added ability of loading custom JavaScript files in various places.
  • Fixed WebDAV hitting very low memory limits when listing folders with large number of items.
  • Minor WebDAV compatiblity fix.
  • Fixed PHP error when trying to list the user activity log when it contains a record related to removing an item from a collection.
  • Improved the software update system for better error handling and reliability.
  • Added "LimitRequestBody 0" in the "recommended.htaccess" to avoid file size limits when uploading via WebDAV on an Apache server.
  • Aesthetical improvements, particularly related to animations and performance related to animations and movement of UI elements.
  • Fixed inconsistency with how the "customizables/events/" scripts were handled for canceling the actions and reporting the error. Also added config option for setting one single PHP script file for handling all user actions. See "$config['system']['fm']['hooks_file_handler']", here: https://docs.filerun.com/advanced_configuration
  • "Select users" panel fix: expanding groups after searching now shows the users in the group. Before it was just showing the search result again.
  • Because web link passwords can be only 32 characters long when setting, accessing the password protected links will now also use for verification only the first 32 characters provided in the password box, otherwise access is not granted.
  • Fixed PHP error when accessing guest login URLs.
  • Fixed not showing output when pressing buttons such as "Check version" in the control panel.
  • Better handling of HTML special characters in metadata fields that hold multiple values.
  • Adding a new user does not save properly the permission "User can make changes to files and folders" when left unchecked.
  • Web link shortening button is no longer shown if there is no configuration supporting the feature.
  • Fixed parameters for the API call for creating new user accounts.
  • Safer handling of HTML characters in file, folder and collection names.
  • The download cart feature has been removed in favor of the file collections, which provides the same functionality, with the same ease of use but more options.
  • Added "$config['app']['logging']['skip_receive_upload']" config file for disabling "File received (via upload)" log entries. Please note that this would also disable any e-mail notification related to this action.
  • Added more variables for more precision in customizing the color theme.
  • The searching inside a control panel user or group selector now shows only users or groups, based on the particular field requirement.
  • Collections can be web linked via the API.
  • The metadata indexing process skips cases where memory limit is being hit. It also displays now a log of encountered error messages.
  • Fixed ability to upload a folder whith a name starting with ".." when initiating the upload via the menus and not drag and drop or copy/paste.
  • Fixed character encoding problem when renaming second time, from the tree panel, a folder with a special character.
  • Downloading a folder with the characters ' (single quote) or % (percentage sign) in the name now preserves those character in the name of the downloaded zip archive.
  • Fixed not being able to access via a direct URL a folder with percentage sign in its name.