Documentation: Admin Customizer plugin

Changelog

1 September 2026

Security: downloading your settings now requires the same confirmation and Super User rights as uploading them, so a link alone can no longer pull your configuration out of the site
Security: locally cached Google Fonts are only stored when they are real font files, and the font folder is closed off for anything that could be executed
Security: settings from an uploaded backup file are cleaned more strictly before they are used in the backend styling
Security: text you enter for the login screen is now placed on the page exactly as typed, without special characters being interpreted
Security: the helper plugin for update logging is only installed when the update server supplies a valid checksum for it, and only from the Joomill update server

1 August 2026

Fix: hiding the sitename and the "Joomla Administrator Login" line in the login sidebar had no effect on Joomla 6.1 and newer. Atum changed that markup from `<h1 />`/`<h2 />` to `<p class="h1" />`/`<p class="h2" />`, so the rules now target both. The sidebar text color applies to both markups as well
Change: full code style pass against the Joomla CMS phpcs ruleset (PSR-12): phpcbf auto-fixes for indentation, line endings, brace placement and whitespace, plus phpcs annotations for deliberate exceptions (`_JEXEC` guards, legacy global class names, legacy API naming). Code style only, no functional changes
Language: added Dutch (nl-NL), German (de-DE), French (fr-FR), Spanish (es-ES) and Italian (it-IT) translations

19 July 2026