UpdraftPlus Premium: WordPress Backup & Migration Plugin 2.24.7.26

N.B. Paid versions of UpdraftPlus Backup / Restore have a version number which is 1 higher in the first digit, and has an extra component on the end, but the changelog below still applies. i.e. changes listed for 1.16.32.x of the free version correspond to changes made in 2.16.32.x of the paid version.

1.24.7 - 04/Nov/2024​

• TWEAK: The update functionalities in the WordPress plugin information box (6.5 and later) have been adjusted to stop updates from taking place in the same window, ensuring that the "auto-backup before update" dialog appears as intended
• TWEAK: Add customized "unserialized" method into the UpdraftPlus class which can handle the use of the "options" argument or its absence when running across different PHP versions
• TWEAK: Add the UPDRAFTPLUS_SEND_UNWRITABLE_BACKUP_DIRECTORY_EMAIL constant to disable the sending of unwritable backup directory emails to users.
• TWEAK: Clearer notifications to users regarding unconfigured remote storage settings and/or the selection of remote storage that are not part of their UpdraftPlus version
• TWEAK: During the resumption of OneDrive’s chunk uploads, the authorisation header and bearer token should not be included as it may lead to an unauthenticated error due to a different upload URL.
• TWEAK: Implement code to enable automatic activation of the UpdraftPlus plugin during the migration process from a multisite setup to a standalone site
• TWEAK: In a multisite environment, ensure that users can access the UpdraftPlus plugin page even in the absence of the WP_ALLOW_MULTISITE constant
• TWEAK: UpdraftClone now supports PHP 8.4
• TWEAK: Prevent a potential PHP deprecation notice when zip creation fails

N.B. Paid versions of UpdraftPlus Backup / Restore have a version number which is 1 higher in the first digit, and has an extra component on the end, but the changelog below still applies. i.e. changes listed for 1.16.32.x of the free version correspond to changes made in 2.16.32.x of the paid version.​

1.24.6 - 25/Sep/2024​

• TWEAK: In 1.24.5, the browser title wrongly displayed as "UpdraftPlus" when accessing an unrelated plugin page using the main menu.

UpdraftPlus Changelog

UpdraftPlus changelog catalogues all the latest updates from the world's most popular and highly rated WordPress backup plugin

updraftplus.com

N.B. Paid versions of UpdraftPlus Backup / Restore have a version number which is 1 higher in the first digit, and has an extra component on the end, but the changelog below still applies. i.e. changes listed for 1.23.1.x of the free version correspond to changes made in 2.23.1.x of the paid version.

1.24.1 - 21/Feb/2024​

• FEATURE: Implement Backblaze Object Lock support (Premium version)
• FIX: The email backup and basic report setting didn't work causing notification email confirming backup status couldn't be delivered to admin's email address (free version)
• FIX: Fix WP-Optimize premium discovery for UpdraftCentral
• FIX: Regression in 1.23.16 for correcting calls to translation functions which then caused some HTML attributes to be empty
• FIX: Restoring backup sets via Migrate/Clone tab had caused all associated backup entities being downloaded immediately ignoring user preferences about the entities they wanted to restore
• FIX: Third-party library conflict (phpseclib) with WP All Import Pro and AIO WP Migration plugins that caused failure in testing SFTP credentials and backing up to the SFTP remote storage
• FIX: Restore compatibility with WordPress multisite running on versions < 4.9 caused by use of function not present before then
• TWEAK: Add new translation entries for UpdraftCentral
• TWEAK: Got rid of PHP 8.2 deprecation messages caused by a null value being passed to the htmlspecialchars() function and creation of dynamic property
• TWEAK: Got rid of PHP 8.3 deprecation messages caused by calling get_class() without arguments.
• TWEAK: Refactor methods in UpdraftPlus_Database_Utility class
• TWEAK: Send an email if the backup directory is not writable.
• TWEAK: Add and set the filename\_only parameter to reduce search times when looking for specific backup files in Dropbox.
• TWEAK: Autoload PHP secure communication library (phpseclib) in a better way that would prevent already-loaded phpseclib classes (by other plugin) from being used in certain operations
• TWEAK: Add updraftplus_backup_db_header_append filter to allow site owners to include arbitrary content in their database backup header

1.23.13 - 22/Nov/2023​

• FIX: An issue that prevented incremental backups from running via WP-CLI or Cron when the option to backup mu-plugins was enabled but no mu-plugins existed
• FIX: OneDrive remote storage authentication was giving the error "Invalid input."
• FIX: The option to back up additional, user-chosen files (i.e. the morefiles entity) was no longer present in the UI
• TWEAK: Remove unused "migrator-lite.php" string during search and replace operations
• TWEAK: Replace remaining hardcoded text domain with UPDRAFTCENTRAL_TEXT_DOMAIN placeholder within the central folder
• TWEAK: LiteSpeed admin dashboard warning is now displayed upon completion of migration on the destination site, even after dismissing the message on the source site.
• TWEAK: Do not show UpdraftPlus news in the WordPress events and news widget section without first gaining user consent
• TWEAK: Change order of checks when seeing if cPanel is present/accessible for asking about disk quota in order to prevent unwanted an PHP notice when safe_mode is active
• TWEAK: Prevent potential fatal error if something has modified an updates check's 'translation' property to be invalid before passing on to UpdraftPlus
• TWEAK: Update bundled cacert.pem file

N.B. Paid versions of UpdraftPlus Backup / Restore have a version number which is 1 higher in the first digit, and has an extra component on the end, but the changelog below still applies. i.e. changes listed for 1.23.1.x of the free version correspond to changes made in 2.23.1.x of the paid version.

1.23.11 - 03/Nov/2023​

• SECURITY: Fix a vulnerability which could, if you had Google Drive storage enabled, and if an attacker targetted a logged-in administrator on your site and persuaded them to access a specific URL that the attacker creates, add the attacker's own Google Drive account to the saved storage methods. Thanks to Nicolas Decayeux of Patrowl for finding and disclosing this issue.
• FEATURE: Add JSTree for Google Drive to select existing folder
• FEATURE: The "Must-use plugins" backup entity can be backed up and restored separately in a normal WordPress site
• FIX: OneDrive folder case sensitivity issue (successfully uploaded backup files to the remote storage but failed in pruning old backup files due to different letter capitalisation; also happened in manual deletions)
• FIX: When two instances of WebDav remote storage were sequentially added in the Premium version, filling some fields of the latest instance would break the WebDav URL of the previous instance
• TWEAK: Update phpseclib library from version 1 to 2. As previously advised, this also means that these features (Database Encryption, Dropbox & SFTP/SCP remote storage, and UpdraftCentral key creations) will no longer be available and can cause a fatal error when running on PHP 5.2
• TWEAK: Add a link to Trustpilot in the review prompt
• TWEAK: Added a warning message when the WPHTTPBLOCK_EXTERNAL is defined and set to true
• TWEAK: Added the "Copy to clipboard" button under the self-hosted central option
• TWEAK: File size is shown when pressing on the backup entity
• TWEAK: Fix the restore dialog to not display "plugins" checkbox when only there's "mu-plugins" entity
• TWEAK: Fixed PHP 8.2 deprecation messages caused by a null value being passed to the rtrim() function
• TWEAK: Resolve PHP deprecations for the dynamic property access by declaring the variables in the class
• TWEAK: Includes the plugin.php file path if "getmuplugins" function does not exist.
• TWEAK: Provide default options for function UpdraftPlus::backup_all()
• TWEAK: Add and call the litespeed_finish_request() function to ensure the HTTP connection made from the browser gets closed immediately without having to wait the process to complete thus leaving it run in the background
• TWEAK: Ensure no PHP "Class not found" is showing up during credentials testing
• TWEAK: Add type checking in UpdraftPlus::handleurlactions() to prevent plugin conflicts causing PHP errors on PHP 8+

N.B. Paid versions of UpdraftPlus Backup / Restore have a version number which is 1 higher in the first digit, and has an extra component on the end, but the changelog below still applies. i.e. changes listed for 1.16.32.x of the free version correspond to changes made in 2.16.32.x of the paid version.

1.23.8 - 08/Aug/2023​

• FEATURE: Given the basic migration feature in the free plugin
• FIX: Content-MD5 and any V2-related headers were always included in the S3's V4 SignedHeaders even though the headers were not presented in a HTTP request
• FIX: Generating URL-encoded queries for a canonical request should have used a method/mechanism which encoded query values according to RFC 3986 (for consistency and for not breaking the code)
• FIX: Search / replace database not working on Admin dashboard > Settings > UpdraftPlus Backups > Advanced Tools > Search / replace database on PHP 8.2 due to stricter type checking
• FIX: A newly added subsite that was restored from a normal site to the multisite was not listed in the site list in the multisite
• FIX: Manual deletion of backup sets appeared to skip some files when multiple instance and/or remote storage were in use
• FIX: The SFTP remote storage stopped working in the UpdraftPlus 2.23.6 release. Reverted the change "TWEAK: Validate SFTP key field on credential test and before save"
• TWEAK: Add a warning in the log file if AWS connection fails and a TLSv1.2 connection test fails
• TWEAK: Add warning for user if only PclZip available
• TWEAK: Fix unable to switch tab when a plugin (wrongly) loads certain CSS onto UD's settings page
• TWEAK: Remove the word 'apparently' in the backup success message
• TWEAK: Update to latest phpseclib 1.0.X version (prevents deprecation notice on PHP 8.1+)
• TWEAK: Change "s3" property to "public" in UpdraftPlusAWSRequest class for PHP 8.2 deprecation compatibility [https://source.updraftplus.com/team-updraft/updraftplus/-/mergerequests/1481]
• TWEAK: Fixed Missing/ broken links for the pCloud image in addons tab
• TWEAK: Buying UpdraftClone tokens through inline checkout
• TWEAK: Fixed Spelling errors in updraftplus repo
• TWEAK: Added save button at the top of setting tab content
• TWEAK: UpdraftCentral module now, by default, overwrites the same existing theme installed on the remote sites (if any), regardless of what version is currently installed or what version being uploaded and installed
• TWEAK: Define class properties in UpdraftCheckoutEmbed class for PHP 8.2 deprecation compatibility
• TWEAK: Update the composer package yahnis-elsts/plugin-update-checker for PHP 8.2 compatibility
• TWEAK: Added username and email details for authenticated dropbox account in updraftplus settings
• TRANSLATIONS: Split sentences to make one sentence in any translation functions

UpdraftPlus Changelog​

N.B. Paid versions of UpdraftPlus Backup / Restore have a version number which is 1 higher in the first digit, and has an extra component on the end, but the changelog below still applies. i.e. changes listed for 1.16.32.x of the free version correspond to changes made in 2.16.32.x of the paid version.

• TWEAK: Remove the incremental dropdown on incremental backup restore when the user selects only the database to restore
• TWEAK: Validate SFTP key field on credential test and before save
• TWEAK: Remove the unused UpdraftPlus_S3::getHttpUploadPostParams() method.
• TWEAK: Fix pCloud deprecated warning in PHP 8.2
• TWEAK: Fix Google Cloud deprecated warning in PHP 8.2
• TWEAK: Fix Google Drive deprecated warning in PHP 8.2
• TWEAK: Fix pCloud deprecation warning in PHP 8.2
• TWEAK: Fixed issue with cron jobs not clearing after wiping settings
• TWEAK: Added link to WP-Optimize in the database size tab in the advanced tools
• FIX: Search / replace database not working on Admin dashboard > Settings > UpdraftPlus Backups > Advanced Tools > Search / replace database on PHP 8.2 due to stricter type checking
• TWEAK: Fixed Missing/ broken links for the pcloud image in addons tab

N.B. Paid versions of UpdraftPlus Backup / Restore have a version number which is 1 higher in the first digit, and has an extra component on the end, but the changelog below still applies. i.e. changes listed for 1.16.32.x of the free version correspond to changes made in 2.16.32.x of the paid version.

1.23.4 - 16/May/2023​

• SECURITY: Fixed a missing nonce combined with a URL sanitisation failure, which could lead to a targetted XSS opportunity (if an attacker persuades a logged-in administrator to both re-authorise their connection to a remote storage (e.g. Dropbox) and then to follow a link personally crafted for their site before re-authorising whilst logged in, he can then store a fixed JavaScript payload in the WP admin area (they would need a further route to use that ability to cause any damage). Because of the need for the administrator to co-operate in multiple steps, this attack is very unlikely (but you should of course still update).
• FIX: DigitalOcean S3-compatible storage does not work with disabled SSL entirely where possible settings.
• FIX: If there was an error or network connectivity issue on first attempt of uploading a plugin/theme file, then the second attempt of uploading the same file would make the file become corrupted thus resulting in installation failure.
• COMPATIBILITY: Suppress htmlspecialchars deprecation warnings on PHP 8.1
• COMPATIBILITY: Suppress some PHP 8.2 deprecation notices from use of ${} style variables, and others from use of dynamic properties
• TWEAK: Handle web hosting company setup that disabled pclose() but not popen()
• TWEAK: All HTTP requests to the Google Drive API now, by default, forces to use HTTP/1.1 version. Also, a constant named UPDRAFTPLUSGDRIVECURLHTTPVERSION can be set in the wp-config.php file to change the default HTTP version to another preferred version
• TWEAK: Improve 'move' and 'copy' filesystem functions in restoring directories containing files to a different mount point/partition than where they reside
• TWEAK: Improve files pruning mechanism, by not repeating already-done ones when resuming deletions
• TWEAK: Improve the Handlebars templates of the Google Drive, Dropbox and UpdraftVault remote storage modules by taking PHP code out of them
• TWEAK: Improve widget layout when decrypting a backup
• TWEAK: Remove Boostrap CSS in Restore Wizard and replace with Flexbox CSS
• TWEAK: Add multisite subsites header information to the database backup file that will be used for converting a network subsite to a standalone normal WordPress site
• TWEAK: Add the UpdraftPlus plugin slug header to the database backup file
• TWEAK: Include next-level-up directory path along with deleted folder's name when deleting a folder
• TWEAK: Update seasonal notices
• TWEAK: Make common logic for getting backup history from the database
• TWEAK: Remove usage of the filegetcontents() function from WebDAV remote storage without chunking upload
• TWEAK: Pass through some previously unhandled Dropbox error codes
• TWEAK: Added the "non-core" word to the WordPress database tables excluded warning.
• TWEAK: Remove WordPress core tables from the non-core WordPress database tables excluded list in restoration step 2
• TWEAK: When migrating the www site, the search replace will be performed in database tables on the non-www domain too, and vice versa