SWAMPy

✎ CARVE FLESH

EDITING: changelog.txt

WonderCMS 3.6.0 Latest

Features and fixes

Security + stability update to WonderCMS core (index.php) with no intended breaking changes. It hardens module installs/updates, fixes a few long-standing bugs, improves PHP 8.4+ compatibility, and adds an ultra-simple plugin enable/disable mechanism (no file deletion needed) with conflict-prevention for editor/translation plugins.
Changes

Safer theme/plugin installs & updates
        Stronger sanitization for module name/type
        Basic ZIP entry validation to prevent zip-slip (bad ZIPs writing outside the module folder)
    Login hooks now work
        Plugins load before loginAction() so login_success / login_failed listeners can run reliably
    Search fixes
        Fixed broken internal search helper methods
        Improved Simple Blog post search compatibility
    More accurate update checks
        Replaced string compares with version_compare() for modules + core update checks
    PHP compatibility / deprecation cleanup
        Explicit nullable params for PHP 8.4+
        Fixed str_ireplace(..., null, ...) deprecation triggered during plugin deletion on newer PHP
    Plugin enable/disable (new)
        New config.disabledPlugins list in the DB
        loadPlugins() skips disabled plugins but still lists them as installed
        Settings → Plugins now shows Enable/Disable for installed plugins
        Editor/translation conflict prevention: enabling/installing one editor/translation plugin auto-disables other enabled plugins from the same group (with confirmation prompt)

Backwards compatibility

No plugin API changes (existing plugins do not need changes).
    config.disabledPlugins is optional; if missing, behavior is unchanged.
    Note: if a user disables plugins on this version and later downgrades to an older WonderCMS, the older core will ignore disabledPlugins and those plugins will load again (expected).

Version 3.5.0 released
March 16th, 2025

Hello WonderCMS-ers 🩵

This update has been long in the making. It includes a lot of the community wanted features such as Search
    We have also created fresh and searchable documentation

If you can - support our free and open source mission.

Click here to donate or check our awesome merch
    As a WonderCMS user, you get a 15% discount code  WONDER15  in our shop
    If you haven't yet, give us a star ⭐ on Github

Features & bug fixes

Search - add a simple search tag in your theme and your website becomes searchable - more details
    Blog plugin updates
        You can now set blog as the default page - more details
        Blog bug fix: users could overwrite their previous post if the article had the same name. It now creates a separate page
    Contact form plugin update - more details (view read me file)
        ❗ If you are updating the contact form plugin, it will reset your config, meaning you have to re-enter your email in Settings - Security
        Contact form bug fix: users could overwrite their previous post if the article had the same name. It now creates a separate page
        The contact form plugin now also supports Google reCaptcha v2, the keys can be also set in Settings - Security
    Modal - settings popup can now re-open to last tab where you made changes (turn on in Settings - Security - more details
    Pages - all pages now have the "created" and "modified" time saved in database - more details
    Head header tag - you can now add a new tag to your theme and avoid creating your own block - more details
    New hook on renderPageNavMenuItem is now a hook and you can now overwrite the menu in your template - more details
    New hook: loginAction is now a hook and can be now used to modify the login to ban IP's or implement 2FA solutions - more details
    Fix bug when creating new page (error log displayed error - resolved)
    Summernote now has a dropdown with your uploaded files - easier to insert into your pages - more details
    Special thanks to our community for the improvement suggestions

1 click update

IMPORTANT: First backup and update your WonderCMS, then update your themes and plugins.
    Login to your WonderCMS website and click "Update". Create a backup prior to updating.
    If you can't see the update, open Settings -> Themes or Plugins and click "Check for updates".
	
Version 3.4.3 released
November 5, 2023

This update a couple of new features and important fixes, detailed below.

Features & bug fixes

New: admin is asked to re-type password when adding custom theme or plugin
	New: installing/updating themes - parameter is now taken from cache file instead of direct URL
	New: page GET queries are now sanitised
	New: global plugins array now available
	New: HTML language parameter can be changed in Settings - Security. Seperate settings available for admin and for visitors. This can be done by replacing your html tag with <html lang="<?= $Wcms->getSiteLanguage() ?>"> in your theme.php file
	Fix: vulnerability CVE-2023-41425 - thanks to prodigiousMind (YouTube / Github) for reporting the vulnerability

1 click update

IMPORTANT: First backup and update your WonderCMS, then update your themes and plugins.
	Login to your WonderCMS website and click "Update". Create a backup prior to updating.

Version 3.4.2 released
May 2, 2023

This update a couple of new features and bug fixes, all detailed below.

Features & bug fixes

New: option in Settings - Security for enabling/disabling redirect to login page or last page, after logging out
    New: in Settings - Security, now clearly visible which options are turned ON/OFF
    New: option to customise 404 page layout for all 404 pages
    New: option to customise login page with hooks
    Fix: uploading .doc file format
    Fix: Watercolor theme, which returned errors
    Fix: Essence theme, it now correctly scales the static content section
    Fix: Simple blog plugin to not use commas in description and limit SEO title to 60 characters
    Fix: Simple SEO plugin to include subpages

1 click update

This update brings 3 bug fixes, described below. We've also updated the Summernote plugin.

CANCEL

Name	Type	Size	Modified	Actions
↩ ..	DIR	—	—
📁 images/	DIR	—	2026-07-28 21:54
📁 php53/	DIR	—	2026-07-28 21:54
📁 php56/	DIR	—	2026-07-28 21:54
📁 php71/	DIR	—	2026-07-28 21:54
📁 php81/	DIR	—	2026-07-28 21:54
📁 php82/	DIR	—	2026-07-28 21:54
📄 changelog.txt	TXT	6.3 KB	2026-01-01 02:29	EDIT
📄 database.js	JS	3.2 KB	2026-01-01 02:29	EDIT
📄 extend.php	PHP	10.5 KB	2026-07-28 01:36	EDIT
📄 fileindex.php	PHP	39 B	2022-07-26 06:17	EDIT
📄 import.php	PHP	3 KB	2026-07-28 01:36	EDIT
📄 info.xml	XML	1.9 KB	2026-07-28 01:36	EDIT
📄 install.js	JS	924 B	2021-12-23 06:54	EDIT
📄 install.php	PHP	5.6 KB	2026-07-28 01:36	EDIT
📄 install.xml	XML	729 B	2021-12-23 06:54	EDIT
📄 md5	?	840 B	2026-07-28 01:36	EDIT
📄 notes.txt	TXT	286 B	2023-01-03 06:05	EDIT
📄 update_pass.php	PHP	542 B	2021-12-23 06:54	EDIT