Changelog

7 October 2026

Security: the Custom CSS setting is checked before it is placed in the page, so it can no longer close the style block and run script on the administrator pages that show it. Changing that setting needs access to the options, which is not necessarily a Super User
Fix: a long API key was cut off while you pasted it. Joomla limits a hidden key field to 99 characters unless the extension says otherwise, so the browser silently dropped everything past the 99th character and the service answered with an authorisation error. The key fields now allow 255 characters. Enter your key again if it was longer than that
Addition: Joomill scheduled promotion
Addition: License status notice
Language: new strings in all 6 languages; the Spanish ones are a provisional translation awaiting review
Change: compatible with Joomla 6.2

1 September 2026

Security: downloading your settings now requires the same confirmation and Super User rights as uploading them, so a link alone can no longer pull your configuration out of the site
Security: locally cached Google Fonts are only stored when they are real font files, and the font folder is closed off for anything that could be executed
Security: settings from an uploaded backup file are cleaned more strictly before they are used in the backend styling
Security: text you enter for the login screen is now placed on the page exactly as typed, without special characters being interpreted
Security: the helper plugin for update logging is only installed when the update server supplies a valid checksum for it, and only from the Joomill update server

1 August 2026

Fix: hiding the sitename and the "Joomla Administrator Login" line in the login sidebar had no effect on Joomla 6.1 and newer. Atum changed that markup from `<h1 />`/`<h2 />` to `<p class="h1" />`/`<p class="h2" />`, so the rules now target both. The sidebar text color applies to both markups as well
Change: full code style pass against the Joomla CMS phpcs ruleset (PSR-12): phpcbf auto-fixes for indentation, line endings, brace placement and whitespace, plus phpcs annotations for deliberate exceptions (`_JEXEC` guards, legacy global class names, legacy API naming). Code style only, no functional changes
Language: added Dutch (nl-NL), German (de-DE), French (fr-FR), Spanish (es-ES) and Italian (it-IT) translations

19 July 2026

Documentation: Admin Customizer plugin