Version 2.2.1

• Fixed: finder.popup() does not work in Chrome 18.

Version 2.2

Security Release: fixed filtering of unsafe characters for IIS6 web server.

• HTML5 multiple file uploads introduced.
• Files can now be uploaded by using the drag&drop in Firefox and Chrome.
• Added a read-only mode (config.readOnly), which if enabled, lets the user browse the files but not upload or modify them.
• CKFinder now supports common lightbox plugins by default when viewing files, and will use Colorbox to show images if no other lightbox plugin is loaded.
• "Upload" button in the toolbar now remains active after a file has been uploaded if the Upload Pane is still open.
• Improved formatting of file sizes.
• Plugin definition now contains a new connectorResponse property which can use raw data sent from the server inside plugins.
• Added support for full URLs in the SetupCKEditor() method.
• Configuration objects passed to the SetupCKEditor() method are now in fact being used.
• Improved support for Android and iOS tablets.
• Updated translations: Slovak; minor updates in all other localizations.
• Fixed: Permission denied to set property Window.onbeforeunload.
• Fixed: ckfinder_v1.js: SetupCKEditor() and SetupFCKeditor() methods are causing a JavaScript error.
• Fixed: IE, Opera: Double clicking a file causes CKFinder to try to close the browser tab.
• Fixed: IE, Opera: CKFinder closes the browser tab after the tab which linked to it was closed.
• Fixed: IE, Opera: CKFinder tries to close the browser tab after pressing the F5 key (Refresh).
• Fixed: When CKFinder is integrated with CKEditor, the URL that is sent back from the Upload tab after a successful file upload is not being encoded properly.
• Fixed: It is impossible to view a file with a special character in its name.
• Fixed: IE8: Selecting a file requires a double click instead of a single one.
• Fixed: High Contrast mode detection.
• Fixed: Flash uploader is unable to deal with unexpected errors.
• Fixed: Always sort folders instead of rely on default sorting by the OS.
• Fixed: Incorrect encoding of file names returned after the file upload.
• Added: Support full URLs in resolveUrl() to resolve to correct $baseDir.
• (Java) Fixed: Removing unsafe characters from file names.

Version 2.1.1

• Sorting by file extension is now available.
• Clear Basket button is now only active when applicable.
• Added support for skins in custom paths (config.skin).
• Added a new API method to destroy an instance (api.destroy()).
• Added an option to specify additional parameters for server requests (config.connectorInfo).
• Added new translations: Bulgarian, Croatian, Esperanto, Gujarati, Hindi, Romanian, Vietnamese, Welsh.
• Updated translations: Brazilian Portuguese, Chinese Simplified, Czech, Dutch, Estonian, Finnish, French, German, Greek, Hebrew, Italian, Lithuanian, Norwegian Bokmal, Norwegian Nynorsk, Persian, Polish, Russian, Slovenian, Spanish, Swedish, Turkish.
• Added Czech version of CKFinder User's Guide ("Help").
• A callback function (config.callback) can now also be defined in the configuration file.
• Added RTL support for skins.
• Improved RTL support in the Flash upload component.
• Fixed: The Flash uploader used wrong URL to send files when CKFinder had an ID attribute assigned (as a result, the upload was never marked as completed).
• Fixed: Added protection against thumbnail caching. CKFinder was displaying an old thumbnail when a user deleted a file and then a file with the same name was uploaded.
• Fixed: [Opera] Double clicking on a folder opens the browser's context menu.
• Fixed: It was impossible to re-enable a disabled context menu command.
• Fixed: config.id is now available for reading within custom configuration.
• Fixed: [Firefox] JavaScript error when reloading the page where CKFinder is used as a popup.
• Fixed: [IE, Chrome] Focus is lost after closing a dialog window.
• Fixed: The startupPath option did not work.
• Fixed: Unable to use CKFinder inside modal dialogs due to inability to properly destroy the previous instance.
• Fixed: When cookie contains an array, clicking the Upload button resulted in an error.
• Fixed: The Watermark plugin (and the AfterFileUpload hook) did not work.
• Fixed: Uploading files did not work when memory_limit was set to -1.
• Fixed: The Watermark plugin (and the AfterFileUpload hook) did not work.
• Windows Authentication support: the server must be configured to forward the credentials.
• Fixed: Return correct MIME type for jpg images.
• (Java) Fixed: The config.resourceType setting was not respected.
• (Java) Fixed: Extra content was added to larger files when they were being downloaded or edited.

Version 2.1

• Added support for multiple uploads using the Flash component.
• Improved rendering of thumbnails. Thumbnails are now loaded dynamically, only when the file is visible. A configurable delay between requesting each thumbnail is available: config.thumbnailDelay.
• Added support for file upload using HTML5 FormData.
• Added an option to set the base user interface color: config.uiColor.
• File upload requires less clicks.
• Improved keyboard navigation and actions.
• Compatibility with mobile devices (Android and iOS).
• Added an option to show an arrow icon that will launch the context menu: config.showContextMenuArrow.
• Updated translations: Brazilian Portuguese, Chinese Simplified, Dutch, Finnish, Hebrew, Italian, Polish, Spanish.
• Added new translations: Estonian, Lithuanian, Persian, Turkish.
• CKFinder User's Guide ("Help") rewritten and fully updated for English and Polish.
• Improved error handling when receiving an invalid XML response from the server connector.
• Added an option to show the OS icons in Firefox: config.useNativeIcons.
• Added an option to specify the path to the custom server connector: config.connectorPath.
• Fixed: The "Download" option returns an improperly encoded filename.
• Fixed: The dialog window used during the copying/pasting operations was broken in IE7.
• Fixed: The Folders Pane was too small in Internet Explorer 9 in compatibility mode.
• Fixed: English text in dialog window titles was flipped when using an RTL language.
• Fixed: View image command opens the file in the same window in Internet Explorer.
• Fixed: Opening context menu triggers folder reload.
• Fixed: Invalid paths in popup(s) samples.
• Fixed: CKFinder was sometimes throwing an "Object doesn't support this property or method" error in Internet Explorer.
• Fixed: Thumbnails were not created if a folder or file name contains a single quote character.
• Fixed: Disable upload button for iOS.
• (Java) Fixed: CKFinder was sometimes unable to load error messages from .jar files.
• Fixed: Incompatibility with FIPS-compliant servers.
• Fixed: Out of memory error when creating thumbnails.
• Modified the default settings in the configuration file for the Images resource type.
• Fixed: CKFinder did not work in Internet Explorer when there was a file with a name that contained some strange characters.

Version 2.0.2

• Added new translation: Finnish.
• Added a way to programmatically close a popup window: closePopup().
• Updated syntax highlighting component used in the fileeditor plugin.
• Fixed compatibility issues with IE9 RC.
• Fixed: CKFinder does not scroll correctly to the uploaded file.
• Fixed: Invalid height of the editing window in the File Editor dialog window.
• Fixed: CKFinder.dom.element.getWindows method is not available.
• Fixed: [Opera] Context menu does not work in the files pane.
• Fixed: When CKFinder is opened in a popup window, after pressing the Cancel button CKFinder asks for confirmation in a wrong window.
• Fixed: Download does not work in IE8 in a popup window.
• Fixed: It is impossible to upload a file when CKFinder is running in a popup window.
• Fixed: File editor does not work in a popup window.
• Fixed: CKFinder loses PNG image transparency on thumbnails.
• Fixed: thumbnails are corrupted when files calling ob_start() are included in config.php.

Version 2.0.1

• Default view settings are now configurable.
• Minimum height for CKFinder has been set to 200px.
• CKFINDER.version and CKFINDER.revision variables are now available.
• Updated and added new translations: French, Hebrew, Japanese, Russian.
• Callback function can now be defined also in the configuration file.
• CKFinder will now remember client settings in a cookie.
• Files are now selected automatically after upload.
• Fixed: Permission denied error in IE 8 when using CKFinder in a popup.
• Fixed: Upload progress bar was broken in FF 3.5+.
• Fixed: CKFinder does not work in a frameset.
• Fixed: RTL support in the files pane.
• Fixed: SSL support in IE6 and Firefox 3.0.
• Fixed: application ID was not passed to the server connector.
• Fixed: CKFinder.setupCKEditor was not working when null was passed as the first argument.
• Fixed: dialogs in an iframe in IE8 quirks mode are renedered incorrectly.
• Fixed: dialogs in IE in quirks mode looked bad.
• Fixed: right click triggered drag&drop in Safari.
• Fixed: content was selected during resizing in Safari.
• Fixed: dialog borders in V1 skin in IE6.
• Fixed: "Empty folder" message disappeared after changing files view mode.
• Fixed: context menu in Firefox on a Mac does not work.
• Fixed: changing file extension caused issues with renaming file for the second time.
• Fixed issue with caching thumbnails.
• Fixed: AVG was reporting a virus in ckfinder.js.
• Fixed: DownloadFile command in ColdFusion was not working properly.
• Debug mode was not working.
• Fixed: AfterFileUpload event was not available in ASP.NET
• Fixed session dependency bug (CKFinder will now work fine when session state is not enabled).

Version 2.0

A brand new release of CKFinder!

• New user interface.
• Moving & copying files is now supported, simply drag & drop a file to the destination folder.
• Improved accessibility.
• Powerful JavaScript API, check the Developer's Guide for more information.
• Support for server side plugins.
• Virtual "Basket" folder to work easier with a set of files.
• Image resize plugin - resize images, create thumbnails in just a few seconds!
• File editor plugin - edit files online, no need to download them and upload back to the server.

Version 1.4.3

• New translations available: Hungarian, Norwegian.
• New configuration option added to force ASCII names for files and folders.
• Fixed problems with returning incorrect URL during quick uploads when baseUrl was set to a full URL.
• Temporary files are now correctly deleted after upload.
• Corrected the default thumbnails directory.

Version 1.4.2

• New translations available: Czech, Dutch, Greek, Slovene.
• Fixed issues with receiving ajax calls when XML response was sent along with white characters.
• Fixed issues with uploading files containing some special characters.
• Integration with CKEditor failed if a full URL including the domain was specified.
• Improved CKEditor compatibility: CKFinder will now use same user language as CKEditor.
• Improved error handling when loading files/folders fails.
• Fixed compatibility with Firefox 3.6 and the lack of onreadystatechange event.
• Solved problems with losing session variables when folder is deleted (added HTTP module that disables FCN).
• Fixed problems with returning "Unknown Error" when file system permissions are insufficient.
• Improved error reporting when running in debug mode.
• Added easy integration with CKEditor in CKFinder class (SetupCKEditor/SetupCKEditorObject methods).
• Fixed issues with invalid .htaccess in the userfiles directory when PHP was running as CGI.
• Fixed problems with downloading large files.
• Fixed invalid code causing problems with generating thumbnails.
• Checking size of uploaded file didn't work in PHP4 when CheckSizeAfterScaling was disabled.
• Calling the resize of images without preserving the ratio failed.
• Fixed problems with creating thumbnails in ColdFusion 9.
• Increased default ApplicationTimeout.

Version 1.4.1.1

• Fixed problems with uploading files in Google Chrome.

Version 1.4.1

• New translations available: Danish, Swedish.
• CKEditor compatibility: fixed issues with selecting thumbnails.
• CKEditor compatibility: fixed issues with quick uploads.

Version 1.4

• CKEditor is now supported.
• Upload progress bar is shown for Firefox 3.5
• New translation available: French.
• Fixed compatibility with BlueDragon.
• Changed the way how thumbnails are created in ColdFusion 8.

Version 1.3.4

• Fixed security issue in the server connector (CKFinder for ColdFusion).

Version 1.3.3

• Fixed "Invalid CFML construct error" in ColdFusion 7 (and earlier).

Version 1.3.2

• Long filenames caused wrong resize of the panes in IE.
• New translations available: Latvian and Portuguese (Brazilian).
• New help files translations available: Polish and Spanish.
• Fixed handling of duplicate ACL entries for the same resource type and path.

Version 1.3.1

• Fixed problem with image validation during uploads of .swf files.

Version 1.3

• Attention: New feature added that may cause compatibility issues in rare situations. The number of arguments passed from CKFinder to the "SelectFunction" has changed. In the second argument, an object with additional data is now passed.
• Added control over the startup path. It is now possible to point CKFinder into selected resource type/folder.
• Improved thumbnails support: it is now possible to define a custom function that will be triggered when thumbnail is selected (SelectThumbnailFunction).
• New configuration option added to access thumbnails directly, if enabled, thumbnail requests are passed to the connector only if one should be created.
• Improved protection against caching of thumbnails by browser.
• Introduced RememberLastFolder setting - if enabled, CKFinder will remember the last used folder.
• Improved the routine to show all the errors sent by the server connectors.
• Improved the control over popup mode - it is now possible to disable auto-closing of CKFinder window.
• Added support for passing CKFinder settings as an object in the javascript integration class.
• Added example explaining how to open CKFinder in selected folder.
• Fixed security issues in the server connector.
• Improved the quality of resized images if quality is set to over 80.
• Fixed issues with thumbnail generation ("String was not recognized as a valid DateTime").
• Resized gif and bmp images are not being changed into png anymore.
• Fixed the issue with generating png image from a jpg file if the extension was in uppercase.
• Fixed issues with invalid .htaccess in the userfiles directory when PHP was running as CGI
• Added BMP thumbnails support.
• Fixed issue where cleaning output buffering triggered custom error handler.
• Added sample Application.cfc and Application.cfm files in the root directory.
• CKFinder now works fine when debugging is enabled.
• Fixed problems with creating thumbnails of files with uppercase extension.
• Thumbnails were not generated for images with "jpeg" extension.
• Improved the parsing of max size for file uploads.
• Fixed problems with uploads>1Mb if the checkSizeAfterScaling setting was enabled
• Fixed problem with debug option in some situations
• Improve handling of the error if the upload is bigger than the limit allowed by the server
• Added another image component library: Shotgraph. You must have a full registered version, the demo doesn't even allow resizing.
• If the extension was in uppercase, the asp.net resizing did generate png files instead of jpg files.
• The thumbnails of bmp and gif files were really png files.
• If the component was set to "auto" the autodetection routine did left one empty file for each request in the temp folder. You can delete all the ckfindertemp files. Note: For better performance, set the component that you want to use instead of letting it as "Auto".
• If the CKFinder was protected with Basic Authentication, the calls to Asp.Net did fail. Automatically reuse the authentication.
• Added support to use the Asp.Net image resizing even if the server runs in a non-standard port.

Version 1.2.3

• Fixed security issues in server connector (directory traversal attack vulnerability).
• When uploading files, a JavaScript error was being thrown if an error occurred during the upload process.

Version 1.2.2

• Fixed issues with sending requests when output buffering is enabled

Version 1.2.1

• Fixed issues with chmoding files and folders due to empty umask() calls
• Corrected require_once calls, CKFinder now works when "." is not in include_path

Version 1.2

• CKFinder is now fully localizable. The German, Italian, Polish and Spanish localization is included.
• Icons are now displayed for files in List view.
• Custom dialog boxes are now being used to avoid issues with popup blockers.
• New configuration option added to hide specific folders and files.
• New configuration option added to check size of uploaded image after scaling.
• New image component added: briz.AspThumb.
• Added option to set image component to "None" (and disable that way all image related operations).
• Provided a way to work with Asp.Net servers in Medium Trust.
• Fixed some details to improve debugging and give proper error messages for unexpected errors.
• Removed the OWC option due to its bad quality.
• New configuration option added to define temporary directory.
• The UI will now reflect changes in the ACL when the Refresh button is used.
• File extensions are now checked in the client side before uploading.
• The [+] icons is now shown in the root folders only if subfolders are available.
• Attention: Permissions applied with the chmod command are now configurable.
• Attention: Permissions applied with the mode attribute are now configurable.

• Creating and removing a folder with the same name was causing an error.
• The # character is now properly encoded in the URL returned by CKFinder if that character is present in the file name.
• Fixed compatibility with Asp.Net 1.1.
• Fixed the scaling option for the Image2 component.
• Fixed the issue with sending the correct url when absolute baseUrl was given.
• Fixed filtering of the resource types when type is set in the url.
• Fixed problems with file uploads when open_basedir was enabled.

Version 1.1

• Attention: The ckfinder.config file has been replaced with config.ascx, which now uses pure C# syntax instead of XML. It makes it possible to add any kind of code in the settings, giving much more flexibility. Previous configuration files must be "translated" to the new format.
• Attention: Some additional security features have been introduced, changing the behavior present on previous versions:
  • The CheckAuthentication() function has been introduced in the configuration file. It must return "true" to CKFinder to work. Pay attention to the comments you will find there.
  • Allowed/denied extensions list is now used to filter displayed files. In previous versions it was used only to restrict file uploads
  • In the default config file, the allowed extensions list is now defined instead of denied extensions list (white list approach).
  • Automatic detection of invalid image files on upload.
  • Disabling the upload if HTML is found inside specific files to prevent against UXSS.
• Introduced CKFinder for ASP and CKFinder for ColdFusion.
• Full server side source code is now available.
• CKFinder is now compatible with Safari 3 (WebKit based browsers) and Opera 9.5.
• CKFinder is now fully compatible with FCKeditor 2.5, including QuickUpload support.
• New configuration option added to set maximum dimension of uploaded images.
• Improved speed of thumbnails loading by CKFinder. HTTP code 304 is being sent whenever possible.
• An alert message is now displayed when the "View" popup is blocked by the browser.
• Dozens of small fixes and enhancements.

• Fixed incompatibility issues with IE 5.5/6 ("The page cannot be displayed").
• Fixed IE6 incompatibility with the "Navigate sub-frames across multiple domains" security setting.
• Removed potential problems with umask & creating directories. Directories are now chmoded to 0755 after creation.
• No errors when memory_get_usage() function is undefined.
• Fixed the issue with the calculation of the size of thumbnails.
• Improved error handling. Error messages are now properly displayed instead of error 110.
• CKFinder now gracefully handles situations, where the connector response is broken.
• Fixed the issue with getting files after renaming a folder.
• Fixed the issue with setting maxSize. It was ignored previously.
• It works with error_reporting set to E_STRICT.
• Fixed small issues with PHP4 and thumbnails generation.
• Thumbnails are not retrieved if no FileView permission in the folder.

Version 1.0.1

Fixed incompatibility issues with IE 5.5/6.

Version 1.0

First public release.