Changelog

10 October 2026

Fix: large uploads are no longer refused at the last step. Every piece of a file counted as a transfer of its own, so an upload of roughly 50 MB or more used up the limit on transfers while it was still being sent and ended with the message that too many transfers had been created
Fix: zip files and other archives upload again. Joomla inspected the content of every piece and rejected it as unsafe when it happened to contain something that looks like a script, which stopped ordinary archives and backups halfway. Which file types may be sent is still decided by the allowed and blocked extension lists
Fix: the My transfers page no longer produces PHP warnings on a site that displays them
Fix: the progress bar is as wide as the form in templates that do not use UIkit, such as Cassiopeia

8 October 2026

Security: a sender can no longer hide HTML in the name they fill in and have it rendered in the e-mails Filedrop sends, so a transfer notification can no longer be dressed up with a fake link or a tracking pixel
Fix: the e-mails are translated again. While an e-mail was being put together the component looked for its own language file in the wrong folder, so a sentence like the note that a transfer was removed after its last allowed download went out as a raw language key
Change: the mail templates keep the language keys instead of one fixed translation, so every e-mail is written in the language that is active when it is sent instead of the language that happened to be active when Filedrop was installed. An existing installation keeps its current mail templates, including any wording changed under System > Mail Templates
Fix: Custom CSS keeps every character CSS needs. The safety check on that setting also removed `<` and `>`, which silently turned a rule like `.a > .b` into a descendant selector and broke `:has(> img)`. Only a closing style tag is removed now
Language: new strings in all 6 languages; the Spanish ones are a provisional translation awaiting review
Addition: Joomill scheduled promotion
Addition: License status notice
Change: compatible with Joomla 6.2

1 September 2026

Fix: the storage folder shown in the component options is the folder that is actually used. Since 1.0.1 a new installation stores its files one level above the website folder, but the options screen and the connection check still calculated the old location themselves, so they showed a path where nothing was stored, warned about the website folder when the files were not in it, and tested a different folder than the one an upload lands in

1 September 2026

Security: on a new installation the uploaded files are stored outside the public website folder, so they can no longer be downloaded directly past the link, the expiry date and the transfer password. An existing installation keeps its current folder
Security: the upload is limited per visitor, so the storage can no longer be filled up and the notification mails can no longer be used to flood a mailbox

27 August 2026

Documentation: Filedrop