Akeeba Backup Pro 9.9.10

Changelog​

New features​

• Use Composer to load all internal dependencies (backup engine, S3 library, WebPush library)

Bug fixes​

• [LOW] Joomla 5: Manage Backups page does not work when the b/c plugin is disabled.

Changelog​

Bug fixes​

• [LOW] Possible PHP error when updating this along other extensions using the same post-installation script

New features​

• Restoration: handle Joomla 4.2+ MFA options

Bug fixes​

• [MEDIUM] JSON API cannot delete backup records and profiles
• [MEDIUM] Plugins not enabled on clean installation

Option to treat failed uploads as a backup error. You can now choose to treat failed backup uploads as a critical backup error which will cause the entire backup process to stop running. Please read the documentation and use this feature only if absolutely necessary.

Bug fixes and minor improvements. Please take a look at the CHANGELOG below.

Changelog​

New features​

• Option to treat failed uploads as a backup error

Changelog​

Bug fixes​

• [HIGH] BackBlaze B2 single file uploads were broken
• [HIGH] Unexpected behaviour in the backend when Joomla cache is enabled

What's new​

Bug fixes and minor improvements. Please take a look at the CHANGELOG below.

Changelog​

Bug fixes​

• [HIGH] Migration from Akeeba Backup 8 always shows an erroneous message that no compatible version has been detected.
• [LOW] Restoration: Wrong message about the emial address when the administrator passwords don't match
• [MEDIUM] Restoration. Administrator email appears as "undefined" in the Site Setup page

Changelog​

Critical bugs and important changes​

• No access control applied in Include and Exclude Information features

Bug fixes​

• [HIGH] Class not found errors when trying to access some pages in Akeeba Backup

Security release (low priority, medium impact issue). Versions 9.4.0 and 9.4.1 had a bug where no access control applied in Include and Exclude Information features. However, this does not mean that your site was in danger at any point. These features are only accessible to users who have the Access Administration Interface (core.manage) permission for Akeeba Backup. On a default installation this is Super Users and Administrators only, the only user groups who have the Configure (akeebabackup.configure) permission also allowed for them. The security issue we are solving is if you had given Access Administration Interface for Akeeba backup to a specific user group but not the Configure permission its users could access Akeeba Backup and manipulate the URL to see and change the profiles configuration and the configuration of excluded databases, files and folders and included off-site folders and additional databases. These are users who are already given backend access to your site, not any random, unauthenticated visitor. This could still be problematic from a security point of view, therefore we recommend that you update to this new version immediately.

Requires Joomla 4.2 or later, PHP 7.4.0 or later. To best prepare for the upcoming versions of Joomla and PHP we had to make some changes to our software. These changes mean that we can no longer support Joomla 4.1 or earlier, or PHP 7.3 or earlier. These versions of Joomla and PHP are already End of Life (EOL) and are used by less than 2% of our clients.

No more messages about your PHP version. We will no longer show you messages about your PHP version having entered security maintenance mode (no bug fixes planned, one year or less before becoming End of Life) or about running End of Life versions of PHP. Joomla already does that in its main Control Panel page.

Bug fixes​

• [HIGH] Joomla Scheduled Tasks for Akeeba Backup may fail with a PHP error
• [HIGH] Quota settings and emails are not processed at the end of the backup process

Miscellaneous changes​

• Better warnings about CRC32 for ZIP files on 32-bit versions of PHP

Bug fixes​

• [LOW] PHP 8 deprecated notices from the WebPush library
• [MEDIUM] Possible PHP fatal error if the server does not meet the Web Push minimum requirements
• [MEDIUM] WebPush code tries to run when not selected resulting in an annoying, but harmless, warning

Miscellaneous changes​

• Notify the user when the server does not support Web Push instead of just failing to subscribe to push notifications
• PHP notices are now only logged when Debug Site is enabled