CompleteFTP revision history

Version Changes
Version 10.1.0
(24 April, 2017)
  • New feature - added ability to add custom IP filter extensions (.NET or Javascript).
  • External database users can now use RSA & DSA public keys for authentication.
  • Added extensive step-by-step user tutorials.
  • Content-Type was missing in HTTP responses, which was a problem if X-Content-Type-Options "nosniff" is set, as the brower can no longer detect the content type.
  • Prevent the first "none" SSH auth method often sent by clients from triggering a failed login event.
  • Fix HTTP/HTTPS upload bug where multipart uploads ended up with an extra char.
  • Fixed bug where 'create a home folder automatically' when adding a new windows user can't be unenabled.
  • Fixed permissions bug in SCP transfers - impersonation wasn't working correctly initially..
  • Fixed issue with confusing log file entries.
  • Fixed HTTP login error that occurred when ‘Use browser-based logins’ and ‘User’s home folder appears as root’ are both enabled.
  • Fixed numerous minor manager GUI issues.
Version 10.0
(21 December, 2016)
  • Major new feature - add ability to write process triggers in Javascript (JSS).
  • Modernize manager GUI with side menu.
  • User and site filtering in events (email and process triggers).
  • Add new system events (banned or autobanned IP address, server startup, clustering failure, certificate expiry).
  • Added TCP port usage view.
  • Numerous manager GUI fixes and minor enhancements.
  • Add ephemeral Diffie-Hellman (DHE) ciphers to FTPS, so perfect forward secrecy now supported.
  • Add ability to set additional HTTP headers so various security headers can be used.
  • Memory optimizations.
  • Disable SSH EXEC command in Standard Edition (and only enable in higher editions if SSH terminals are enabled).
  • Fix starting CFTP service from the manager (asks for elevated permissions).
  • Fix client certificate support in TLS 1.2 (i.e. FTPS).
  • Fix bug in FTP listing of absolute paths with a wildcard.
  • Fix bug where couldn't set the external passive IP if there was a 0 in the IP address.
  • Fixed bug where the manager gets into a loop if the real-time log download continually fails.
Version 9.1.3
(10 October, 2016)
  • Added ability to import Filezilla server users, folders and groups.
  • Fixed bug in gateway preventing multiple downloads and fixed issue with a SFTP <-> FTP failure.
  • Fixed bug in FTPS experienced when thousands of small files are transferred.
  • Fixed "invalid message number" issue experienced by WinSCP when transferring via SFTP.
Version 9.1.2
(12 September 2016)
  • Fixed SFTP bug that can cause server cpu to spike when certain clients such as perl sftp are used.
  • Fixed real-time logging bug that causes a loop in the manager when FTP is used as the connection protocol and real-time logging is enabled. Workaround is to use the default SFTP protocol to connect manager to the server (on port 14983).
Version 9.1.1
(30 August 2016)
  • Fixed cluster bug stopping servers from being added and also preventing synchronization (introduced with automatic deactivation in 9.1.0).
  • Fix for "Unable to load DLL 'dwmapi.dll'" error in CompleteFTP manager on Windows 2003 Server.
  • Fixed bug where min/max/close wouldn't be visible in Windows 2008.
  • Fixed bug preventing macros from working when used in names of virtual file-system folders.
  • Fixed bugs in new certificate chain importation feature - some certificates failed to load.
  • Fixed bug on machines with desktop logins disabled that allowed users to access folder that they did not have Windows permissions to access.
  • Prevented deactivation of servers if current activation key is invalid (esp if config moved to new machine).
  • Added error-message if user tries to deactivate on machine with invalid activation key.
Version 9.1.0
(5 August 2016, see also 9.0.1 changes)
  • Release of Free Edition supporting FTP and FTPS.
  • Support for automatic activation and deactivation added.
  • Added support for Tags in authentication extensions.
  • Various Javascript Server-Side (JSS) fixes and improvements:
    • Fixed bug preventing multiple JSON DBs
    • Added tags property to system.user.
    • Added adapterAbsolutePath to File objects.
    • Prevent circular includes.
    • Added support for x-www-form-urlencoded (i.e. standard form) encoding in HTTP POSTS.
Version 9.0.1
(19 July 2016, not made generally available)
  • Support for loading of intermediate SSL certificates, and sending the entire certificate chain to clients.
  • TLS 1.2 fix where signalling ciphers were being selected as genuine ciphers. Error in debug log was "Offset and length were out of bounds for the array".
  • Ensure FTP welcome message and SSH user auth message is converted to ISO-8859-1 (as some Unix clients can't cope with UTF).
  • Improve efficiency of SFTP threading when many small files are transferred.
  • Fix FTP directory listing so wildcards are handled.
  • Improve memory utilisation with the multiprotocol gateway.
  • Ensure clients don't complete a transfer until the secondary transfer is complete in the multiprotocol gateway.
Version 9.0.0
(23 March 2016)
  • Real-time log viewing in CompleteFTP Manager.
  • Script-based extensions. Authentication, file-system and custom command extensions can now be written in Javascript (JSS) and entered directly into CompleteFTP Manager. Enterprise Edition only.
  • Read-only sites. Sites can be switched to read-only using a single checkbox.
  • Added FTP STAT command.
  • Added passwd command to SSH shell so internal users can change their password.
  • Groups can now be set from authentication extensions.
  • New flat look-and-feel for CompleteFTP Manager.
  • Many improvements to JSS resulting from the development of our customer portal, edtConnect, which is hosted on CompleteFTP. Most notable is the introduction of JSON-DB - an indexed database where objects are stored in individual JSON files.
  • Changed gateway so that FTPS can specify max & min SSL connections.
  • Upgraded log4net DLL to 1.2.15. Resolves syslog bug in earlier log4net DLL.
  • Fixed SCP bug where filenames containing spaces could not be downloaded.
  • Fixed WinSCP issue where a directory's name was appearing in its content listing.
  • Fixed anonymous HTTP bug.
  • Fixed HTTP session time-out bug. Session time-outs were measure from time of login rather than time of last access.
  • Over 60 minor bug fixes and enhancements in CompleteFTP Manager resulting from a comprehensive usability review.
  • Made a start at improving CompleteFTP Manager's accessibility by making more user-interface elements compatible with Windows Narrator. It's still early days, so we're looking for feedback on this.
Version 8.5.1
(15 January 2016)
  • Fix bug affecting database authentication logins (login failure).
Version 8.5.0
(30 November 2015)
  • Password hashing now uses PBKDF2-SHA256.
  • New command-line commands for administering permissions (chmod, chown).
  • Support for TLS_FALLBACK_SCSV in TLS.
  • Fix bug in SSL3 renegotiation.
  • Change anonymous FTP behaviour so that if disabled there is still a password prompt.
  • Fix issue where login failures did not trigger the login event when set.
  • Remove RC4 support from default ciphers (as no longer regarded as secure).
  • Fix issue where downloading files with special chars in their name from HTTP works on Firefox but not with Internet Explorer.
  • Fix bug where all connections in the manager application are shown as from one user.
Version 8.4.0
(9 October 2015)
Version 8.3.3
(7 September 2015)
  • More efficient memory utilization, and now uses .NET 4.x framework if it is installed.
  • Bugfix for scheduled events, where some events were not firing due to a race condition.
  • Bugfix for downloading from a zip folder.
  • Fixed OpenSSH 6.7 (and higher) issue using HMAC SHA2 with SFTP.
  • Fixed incorrect IP address in logging.
Version 8.3.2
(22 July 2015)
  • Now reuses PASV port for the same client, meaning PASV port range is used more efficiently.
  • Fix to FTPS implicit mode.
  • Better throttling of server messages being sent to clients, reducing memory consumption.
  • Fix to SSH key re-exchange when initiated by clients.
  • New version of CompleteBox (1.1.1) included.
Version 8.3.1
(17 June 2015)
  • Replace Microsoft HMAC in SSH/SFTP as it was causing problems for a user.
  • Fix a directory traversal security vulnerability.
  • Minor fixes to logging.
Version 8.3.0
(8 May 2015)
  • Added scheduled events. This means events can be set up to fire at a predefined schedule, such as once per hour or at midnight every weekday.
  • Selectable ADO.NET providers for database authenticator.
  • Add SHA1 to database authentication option, so now MD5 and SHA1 are supported.
  • A user's Active Directory home directory can now be set as a macro variable.
  • Set service recovery options to automatically restart for new installations.
  • If the anonymous user is disabled in FTP, give an error rather than prompting for password.
  • Fix issue with certificate signing requests that meant Verisign/Symantec would not accept them.
  • Make IPAddresses configuration field larger so more network interfaces can be supported.
  • Gateway authenticator fix - for multiple authenticators, the connection details of the first remote server were being re-used.
Version 8.2.0
(18 March 2015)
  • Per-user IP filtering.
  • Add SHA-1 password hashing to Authenticator. Now extensions can use SHA-1 hashed passwords.
  • Revert to using SHA-1 in certificate signing requests (CSR) because Verisign doesn't accept SHA-256 requests!
  • In CompleteFTP manager, the FTP/FTPS Server Certificate property is now also available under Advanced HTTP/HTTPS Settings.
  • There is now an Extensions directory for loading extension assemblies from.
  • Allow filenames which have '...' as part of the name(three dots).
  • Many new Javascript Server-Side (JSS) features.
  • New maximum connections per user setting.
  • Fixed issue starting CompleteFTP manager on .NET 4.x-only installations on machines with non-English Windows. Manager would terminate with a FileNotFoundException referencing CompleteFTPManager.resources.
  • Fixed issues with initial blank page appearing after logging in via HTTP/S.
  • Fixed "Couldn't create unsigned certificate" exception that occurred on install with Windows Server 2003.
Version 8.1.6
(11 February 2015)
  • Use SHA-256 for certificate requests (CSRs) and for generating self-signed certificates.
  • Can now downgrade the edition automatically when applying purchased activation key.
  • Added lrename and ldelete to FTP scripting engine, and direct debug output to server log.
  • Add ability to export IP filter data from manager.
  • Modify installer so that CompleteFTP service is not removed when installer is run (if it exists).
  • Tidy overview panel.
Version 8.1.5
(16 January 2015)
  • Permit USER/PASS commands to be sent after logging in as per RFC 959.
  • Drag and drop for IE in the web file manager.
  • Fixed short timeout for starting downloads in web file manager.
  • Fix Gateway problem of closing the FTP connection when accessing a gatewayed FTP server via HTTP.
  • Fixed bug with default domain being cached when authenticating via automatic Windows users.
  • Improve memory management for SCP transfers of large files.
  • Fix OnChannelClosed() exceptions in log in SFTP.
  • Fix unusual stability issue reported by a user.
  • Fixed some URLs in the manager application.
Version 8.1.4
(5 December 2014)
  • Improve performance of SFTP under heavy load, and generally reduce memory consumption.
  • Include client's IP address in logging.
  • Improve TLS session resumption.
  • Fix disabling of SSL renegotiation.
  • Store logging config in separate file so that it doesn't get overwritten on reinstall.
  • Resizable panels in the group view, process trigger and email notification panels.
  • Undeprecated IUserInfo.HomeDirectory.
  • Fixed pscp bug where "Lost connection" was seen.
  • Fix HTTP/S intermittant download failures.
  • Fix gateway OutOfMemory error for large transfers.
Version 8.1.3
(22 October 2014)
  • SSL 3.0 is now disabled by default for FTPS and HTTPS. This was motivated by the POODLE vulnerability in SSL 3.0.
  • Added hmac-sha2-256 and hmac-sha2-512 support to SSH/SFTP.
  • Optimize use of SMTP client for the server so that email triggers scale better.
  • Fix minor installer issues - some files weren't being deleted on uninstall, and the manager is now detected if running when the installer is started.
  • Ensure that the Admin site is always listening on localhost no matter what configuration changes are made.
  • Fixed an SFTP bug that caused problems for file transfers in the multi-protocol gateway.
Version 8.1.2
(26 September 2014)
  • Add the ability to prevent files with name matching set filemasks from being uploaded or renamed to.
  • No longer a restriction on number of gateways that can be set up.
  • Improved error-reporting in web file-manager.
  • Updated the edtftp.exe scripting binary - adds some new features.
  • Fixed problems with multi-file upload in web file-manager ('invalid backend response' error).
  • Fix hanging session problem for users with disk quota.
  • Fixed "The path is not of a legal form" error in process trigger.
  • Fixed bug in adding multiple non-Windows users, which added a generated username if the user was already present.
Version 8.1.1
(29 July 2014)
  • Change from superceded OID for sha1withRSA to PKCS#1 OID in certificate request generator.
  • Fix bug where HTTP SSL ciphers couldn't be disabled.
  • Fix problem of Filezilla 3.6.x and later versions getting a parse error on newly generated self-signed certificates in FTPS.
  • Now rejects client-initiated SSL renegotiation.
  • Fixed cross-site scripting security hole.
  • Fix quota bug for random write access.
  • Fix problem where clients that stop transmitting during transfers but keep connection open do not time out.
  • FIx so that Chrome FTP works correctly (sends two PASV commands).
  • Rationalise macros across email & process triggers.
  • Fixed search in CompleteFTP manager.
  • Fixed bug where HTTP failed on a site if anonymous user was disabled for that specific site.
  • Fix Elfinder download bug which occurs when home is set to root.
Version 8.1.0
(24 February 2014)
  • Numerous improvements to the CompleteBox file-sharing client, including file synchronization.
  • Multi-protocol wrapper now supports publickey authentication for SFTP.
  • SSH user authentication methods can now be specified on a per user basis in the Enterprise Edition.
  • Discard changes button in the manager client.
  • Search added to User Guide, and PDF version included.
Version 8.0.1
(12 December 2013)
  • Add HTTP PUT.
  • Fix bug where some users received an "Index does not exist" error message in the CompleteFTP manager when deleting a folder.
  • Fix CompleteBox right-button click from Windows Explorer stopped working bug.
Version 8.0.0
(2 December 2013)
  • Added support for file-sharing, via a file-sharing client, CompleteBox.
  • Added the ability to write web-apps in Javascript, making CompleteFTP a powerful platform for developing file-oriented web applications.
  • Improved ability to download diagnostic information for support.
  • Significantly improved HTTP support.
  • Many minor enhancements and bug fixes.
Version 7.4.0
(4 October 2013)
  • SSH local port forwarding added, so that SSH tunnels can be set up.
  • Add new SSH admin shell commands: folderadd, foldermodify, folderdel.
  • Added timestamp preservation to scp.
  • Added SSL session resumption to FTPS.
  • Implemented rename in the Gateway.
  • Fixed a connection leak in the Gateway.
  • Fixed incorrect key fingerprint displayed for user keys.
  • Implemented FXP_FSETSTAT in SFTP.
  • Fixed scp file overwrite bug.
  • Fixed bug where RSA host key length was only 1024 in new sites - now 2048 bits.
  • Manager does not need to be running as administrator to import a new certificate and PVK file.
  • Fix disk quota bug.
  • Fix cyclic error message when using cp and mv commands in the SSH shell to copy a file into a subdirectory.
  • Ensure allowed protocol list is viewable in Standard Edition.
Version 7.3.0
(3 June 2013)
  • Addition of an "Allow always" category in IP filtering. These IPs can't get autobanned.
  • Allow numeric ranges in IP filters.
  • In SFTP, if file exists don't send an error in response to FXP_STAT if size or last modified time can't be obtained. This helps some Unix SFTP clients to work correctly.
  • Improved connection establishment performance by using cached local IPs.
  • Fixed bug where HTTP session timeout of 0 was not infinite.
  • Fix problem in email triggers where duplicate emails were sent under certain circumstances.
  • Move jquery code to local disk to prevent security error.
  • Call Dispose() on extensions.
Version 7.2.1
(23 April 2013)
  • Now Windows Server 2012 certified.
  • Improved installer to better detect .NET versions.
  • Fixed bug in SSH authentication when not all auth methods enabled.
Version 7.2.0
(21 March 2013)
  • Added HTTP file management - a Javascript file manager supporting upload, download, file viewing and more. Professional and Enterprise Editions only.
  • Added support for Windows RODCs when listing users (previously needed to be writable).
  • Enabled public key authentication to be used with Automatic Windows Users (the password must still be supplied).
  • Database authentication now supports use of password salts.
  • Allow admin user-name change in Standard and Professional Editions.
  • Make sure # can be used in file-names in HTTP.
  • Minor display bug fixes in the CompleteFTP manager.
  • Documented how to achieve syslog integration.
Version 7.1.2
(5 February 2013)
  • Unlimited-size, unbuffered HTTP uploads. Previously uploads were capped at 20MB because they were buffered in memory before being written to disk.
  • Added support for customized and automated installation.
  • Corporate Editions now come with an optional universal activation key (so that online activation is not required).
Version 7.1.1
(18 December 2012)
  • Performance enhancements.
  • Fixed SFTP bug where if first_kex_packet_follows=true is set, the guess is handled incorrectly.
  • Fixed "Server offline" bug, where if the server is taken offline in the manager, it can't easily be put online again.
Version 7.1.0
(26 November 2012)
  • Added support for customizable HTTP listings.
  • Added support for remote ZIP-file navigation. ZIP-files on the server can now be mounted as a directory, changed into, and individual files retrieved (write is not supported as this stage).
  • Added support for SSH keypair generation for users.
  • Make restarts of file downloads possible for > 2GB restarts (in FTP and FTPS).
  • Login/logout events in HTTP.
  • Add Groups to ISession for use in extensions.
  • Disallow slashes in virtual folder-names and prevent duplicate folder names. Add hidden folder flag for virtual folders.
  • Allow CoreFTP to use MDTM in a non-standard way for compatability.
  • Add option to exclude admin logging in log-view
  • Make virtual directories non case-sensitive.
  • Fix broken audit log, which wasn't logging anything.
Version 7.0.1
(5 October 2012)
  • Make CompleteFTPServer.dll strongly named.
  • Add the FilenameOnly listing format for FTP.
  • Enable macros to be placed in the names of virtual folders.
  • Fixed trial installation problem where the error "Key not valid for use in specified state" was seen.
  • Fixed bug applying Windows permissions of auto-created folders.
  • Fixed folder re-ordering bug that occurred when renaming folders.
Version 7.0.0
(20 September 2012)
  • Major new feature - cluster support in Enterprise Edition!! This means configuration changes on the primary server in the cluster are automatically propagated to the secondary servers. Very useful for failover and load balancing.
  • Added ability to add users via a script.
  • Fixed listings so if a single file was specified, its details are shown.
  • Added IsValidRSAKey and IsValidDSAKey methods to Authenticator so that users can validate public keys themselves as part of implementing an authentication extension.
Version 6.4.2
(23 July 2012)
  • Groups can now be defined for database users by providing an additional field in the query that supplies a comma-separated list of group-names.
  • Ensure any temporary script files are created by the process user.
  • Make standard RSA keylengths 2048 bits (increased from 1024 bits).
  • Fix bug when trying to log in as a disabled user (IsAnonymous NRE).
  • Fix security vulnerability in directory navigation.
  • Fix potential security vulnerability in SSH DSA signing. Thanks to Nadia Heninger for pointing this out.
  • Fixed bug that made using multiple email addresses as targets for email triggers difficult to use.
Version 6.4.1
(28 May 2012)
  • Modify response when anonymous user is disabled so that Internet Explorer pops up its login prompt.
  • Fix bug where PVK files generated during CSR creation failed to import when a new certificate was being imported.
  • Fixed bug in when adding multiple Windows users. If UseHomeForAllSites was not selected then would get "Please make sure every enabled site has a home-folder defined."
Version 6.4.0
(7 May 2012)
  • Added support editing of properties of multiple users in a single operation. Users can be selected by group membership and wildcard filter. Users may be added to groups when they're being added using the 'add multiple non-Windows users' form.
  • Group membership is now shown in the user-list in the Users panel.
  • Users can now be set an expiry date beyond which they cannot log on.
  • Added support for the generation of Certificate Signing Requests (CSRs) via the CompleteFTP manager.
  • Made it easier to implement custom authenticators, and added support for doing public key authentication.
  • Added support so that SSH/SFTP users can change their passwords if this is permitted.
  • Added support in custom authenticators for forcing password changes for SSH/SFTP users.
  • When using FTP scripts as process triggers, sometimes they fail with the error "The directory name is invalid". Now fixed. Also upgraded script engine.
  • Fixed bug where automatic Windows users failed to authenticate in HTTP/HTTPS.
  • Permit paths to contain ':'.
  • Fix bug where the manager overview panel fails to restore after minimizing.
Version 6.3.0
(27 February 2012)
  • Add HTTP to the multiprotocol gateway (Enterprise Edition only).
  • Add new macros, TIMESTAMP:format and TransferStatus for use in events.
  • Create new email notifications and process triggers by copying existing ones.
  • Redirect to user's home directory when logging in via /login page in HTTP.
  • System folders can now be viewed in folder browser in folder tab of manager.
  • Minor GUI improvements in the manager.
  • Fix bug where encrypted passwords were enabled and changing the admin password meant they could not be decrypted (and resulted in an error being displayed).
  • Fix trigger macro bug where WindowsPath and WindowsFolder macros were returning incorrect values when the home-appears-as-root feature was enabled.
  • Fix bug in email triggers where "Notify on Error" could not be saved.
  • Fix problem with license.exe - error message was "Could not load file or assembly 'System.Data.SqlServerCe, Version=3.5.1.0".
  • Fixed file-system permission problem, which applied incorrect folder permissions for sub-folders if "User's home appears as root" was enabled. Previously the permissions of the user's home folder would be applied to all subfolders, overriding any that may have been defined for these.
Version 6.2.0
(28 December 2011)
  • Major Enterprise Edition feature added - the Gateway. This allows CompleteFTP to act as a gateway to other FTP servers - translating protocols in the process.
  • Added ability to define custom MIME types.
  • Permit non-Windows users to use the SSH terminal.
  • Minor bug fixes, and tweaks to manager GUI.
  • Fix bandwidth limiting bug in SFTP.
  • Fixed bug where invalid event data could hang subsequent events.
Version 6.1.0
(20 November 2011)
  • Introduced overview panel for Complete FTP Manager.
  • Added support for HTTP FORM uploads.
  • Make SFTP the default protocol for the Complete FTP Manager for new installations.
  • Add flag to enable support of backslashes in paths.
  • Fix HTTP session bug that can result in multiple authentication prompts.
  • Simplify installer options and operation.
  • Fix bug re client certificate authentication. Enforce admin permissions for managing the trusted certificate store.
Version 6.0.0
(23 August 2011)
  • Major Enterprise Edition feature: added support for multiple sites.
  • Added HTTP directory listings (Professional and Enterprise Editions).
  • Fixed bug preventing change of directory with a relative path into a virtual dir.
  • Fixed bug giving inconsistent timestamps for virtual dirs.
  • Fix bug where administrator password could not be changed if SFTP protocol was chosen.
  • Added support for multiple deletion of folders and users.
  • Improved memory management significantly.
  • Allow indefinite auto-bans (i.e. until next server restart).
  • Allow additional administrative users.
  • OPTS UTF ON/OFF added for FTP.
  • Make contextual help hidable.
Version 5.2.1
(18 May 2011)
  • Introduction of Enterprise Edition with support for custom extensions for authentication, events, site commands and the file system.
  • If AUTH argument not understood the client can now respond with USER if FTPS is not mandated.
  • Now examines the first character of the TYPE argument and compares with I or A rather than comparing the entire argument string.
Version 5.2.0
(27 April 2011)
  • When adding multiple Windows users a single home directory can be now be specified (usually a macro folder).
  • Added read-only flag for users. If a user is readonly then uploading (and other write operations) is not permitted for that user regardless of what file permissions are set.
  • Make FEAT more RFC compliant (remove '211-' in front of each feature in the list).
  • More firewall friendly for FTP active mode transfers (server binds to FTP data port 20).
  • FTP commands are now uppercased to cater for clients that send 'pasv' rather than 'PASV'.
  • Improved installer. Status updates are only displayed for certificate and key generation if they are actually being generated.
  • Fixed bug caused by clashes between naming of virtual file-system folders and Windows file-system folders. Windows folders now take precedence.
  • Prevent a file being closed prior to last FXP_WRITE by queuing the message (also for FXP_SETSTAT).
  • Fix bug limiting the number of email notifications (again!), and a bug where changed notifications were saved to the config database but not immediately applied.
  • Fix bug preventing notifications for HTTP.
  • Fix SFTP authentication bug re enabled flag.
  • Fix Windows user directory traversal bug.
Version 5.1.1
(15 March 2011)
  • Fixed bug where FTP connection would be broken by the passive wait timeout if there was a error while getting a listing or transferring in passive mode.
  • Fix bug in "Admin" configuration re error message "The value for column "ExtUserID" in table "Site" is DBNull".
  • Fix bug in email and process trigger filename filters, where wildcards were being treated as regex's.
Version 5.1.0
(21 February 2011)
  • Permit export of server's private key to file (only if manager is running locally).
  • Fix for Fetch (Mac OSX), which can't cope with FXP_READ replies that are out of order.
  • Fix for scp when "User's home folder appears as root" is set.
  • Fix in FTP so that 550 is returned when attempt made to delete a non-empty directory.
  • Support for aes128-ctr, aes192-ctr and aes256-ctr in SFTP added.
  • Support for diffie-hellman-group-exchange-sha1 and diffie-hellman-group-exchange-sha256 in SFTP added.
  • Fixed bug re anonymous user being permitted when the anonymous user was disabled (but anonymous enabled in Settings).
  • Fixed bug with multi-line welcome text in FTP when product details are hidden (Windows 7 ftp.exe hung).
  • Automatic backup of configuration file on a daily basis (if altered).
  • Fix for infrequent occurrence of server stopping listening.
Version 5.0.0
(20 December 2010)
  • Now supports HTTP and HTTPS.
  • Added support for external users via an OLEDB connection.
  • Added support for bulk user imports.
  • Process triggers now support FTP scripts.
  • Now supports TLS 1.1 for FTPS.
  • Handles anonymous user logins in a more standard manner for FTP.
  • Improved scalability re simultaneous connections.
  • Add login and logout event auditing.
  • SITE commands now case insensitive.
  • Listeners are started/restarted appropriately when "Apply Changes" is selected in the manager and protocols have been enabled or ports changed.
  • Can now hide product and version number in welcome messages/banners, for PCI compliance.
  • Fixed error with FTPS implicit where AUTH is (unnecessarily) required to be sent by the client.
Version 4.1.0
(10 September 2010)
  • Pro version now supports multiple SSH keys per user.
  • Fix bug where timestamp of newly uploaded file can be incorrectly set.
  • Implicit FTPS now supported.
  • SSL email servers now supported for notifications.
  • SSH exec now supported (for the same commands available in the SSH shell).
  • Fix bug that allowed guest users access if guest is enabled on the server machine.
  • Fix bug limiting the number of email notifications.
  • Improve server memory management.
Version 4.0.3
(1 June 2010)
  • Security fix to disallow paths containing '...' and ':'. This prevents unauthorised directory listings and transfers from outside a user's home directory.
  • Fix so that Powershell scripts are piped directly into Powershell rather than via a temporary file.
  • Minor GUI fixes to process trigger setup. Also path filter was not being used in process trigger - now fixed.
Version 4.0.2
(30 April 2010)
  • Domain name filters added.
Version 4.0.0
(16 April 2010)
  • Extensive real-time charts for performance monitoring. (Professional Edition only).
  • Added Process Triggers - the ability to launch processes on the server when events such as uploading or downloading occur (Professional Edition only).
  • SSH terminal access added for Windows users (Professional Edition only). Includes ability to execute processes on the server.
  • Disk quotas introduced (Professional Edition only).
  • Bandwidth quotas introduced (Professional Edition only).
  • Can now create a new folder from within the add-user forms.
  • Fix bug where creating a directory failed in WinSCP (when using SCP only).
  • Bug fix where it was reported that there was an unhandled exception causing the service to terminate.
  • Fixed bug where changing directory using forward slashes permitted navigation out of user's directory.
  • Fixed problem with determining AD group membership.
  • By default a maximum of 10 anonymous connections are now permitted (prevents someone denying service by connecting as anonymous many times.
Version 3.3.0
(22 February 2010)
  • Add support for autobanning of IP addresses (configurable in Professional Edition). If a client IP has too many authentication failures, it is automatically banned for a period.
  • Add support for WinSCP with the SCP protocol (already works with WinSCP/SFTP).
  • Some minor SCP fixes.
  • Fix manager logging problem - now logs correctly to ApplicationData (for the user).
  • Fix manager problem where new filters could not be added for the administration server.
Version 3.2.2
(2 February 2010)
  • Fix bug in handling of invalid SSH_FXP_EXTENDED messages.
  • Add filtering for reducing the number of users returned from large active directory domains.
  • Can now install the manager only for remote administration from another machine (production install only).
  • Fixed upload bug in SCP resulting from an infrequent race condition.
  • Increased minimum SSH window size to 64K to fix problem uploading with cURL.
  • CompleteFTP manager now logs to the same directory as the server.
  • Fixed installer bug whereby it always asks if the existing configuration should be kept even when it doesn't exist.
Version 3.2.1
(18 December 2009)
  • Fix "User's home folder appears as root" bug which prevented users from logging in when this flag is set (SFTP only).
  • Code sign the installation executable.
Version 3.2.0
(8 December 2009)
  • By default permit all Windows users to logon without explicitly adding them to the user database (see Settings). This can be restricted to users in active directory and/or local groups
  • Add option for home directory to appear as root ("/").
  • Add new permissons to Pro version: list folder, delete, create folder permissions. Make Windows and non-Windows permissions distinct.
  • Added license import/export command-line tool.
  • Permit non-Windows users to change their passwords (disabled by default).
  • Fix to prevent error when Cyberduck uploads files.
  • Fixed key re-exchange bug when kex initiated by clients.
  • Fixed Blowfish bug in SFTP.
  • Can now optionally delete the configuration on reinstalling.
  • When making a license request, allow copy to clipboard for separate emailing.
  • Allow admin to highlight and kill multiple connections. Auto-refresh of connection view.
Version 3.1.2
(26 October 2009)
  • Added new folder-type called 'Network Folder', which supports UNC paths.
  • Fixed erroneous license warning from Manager when used remotely.
  • Fix idle timeout problem causing SFTP sessions to never time out if disconnected abruptly.
  • Fix 'All users (read)' folder permission in Standard edition.
  • Allow path to config.sdf to be specified on CompleteFTPConsole.exe command-line.
  • Better error-handling in Windows file-listings.
  • Fixed error in new-user form causing half-configured user to be added when the user-root directory does not exist.
  • Improved login error messages.
Version 3.1.1
(16 October 2009)
  • Fixed problem where not all active directory users were listed if greater than 1000 users.
  • Fixed problem where failed to login domain users with non-alphanumeric chars in username.
  • Fixed problem where failed to log in local Windows users that were also on a domain.
  • Fixed problem where certificate parsing failed if there was a comma or semicolon in the subject.
  • Fixed problem where multiple Windows users could not simultaneously share MyDocuments.
  • Stop CFTP Manager minimizing to tray.
  • Stop Windows users from accessing other home directories.
Version 3.1.0
(4 September 2009)
  • User-specific protocol settings.
  • Reduce memory usage during log file viewing.
  • Stop scp client from hanging if SCP is disabled in the server and a command is attempted.
  • Fixed error where target filename could not be specified in scp.
  • Improved passive mode port range handling.
  • Logging improvements.
  • Fixed bug preventing deletion of e-mail notifications.
  • A variety of minor GUI fixes.
Version 3.0.1
(7 August 2009)
  • Fix logging bug where can't change log level to Debug.
  • Fix notification bug where can't delete last notification.
  • Fix incorrect log file location (Program Files -> Program Data).
  • Fix SCP bug where copy failed if target was a filename.
  • Minor performance tuning changes.
Version 3.0.0
(30 July 2009)
  • Added support for SCP (Professional Edition).
  • Permission editing added (more sophisticated version in Professional Edition).
  • Email notification for a variety of events such as file upload, download, delete (Professional Edition).
  • Auditing (i.e. tracking all changes to files - Professional Edition).
  • FTPS client certificate verification (Professional Edition).
  • IP filtering added - accept/reject connections based on IP address (Professional Edition).
  • Can now specify the network interfaces to listen on.
  • No longer disconnects channel when client sends SSH_CHANNEL_EOF.
  • Added support for MODE S (which is the default).
  • Fix re file overwrite problem.
Version 2.2.1
(24 June 2009)
  • Now closes console gracefully.
  • Fixed bug whereby a disabled user could still log in via SFTP.
  • Fixed bug where newly generated SSL certificate failed to save to the config.
  • Fixed auto-add user checkbox in 'Add Windows user form'.
  • Fixed bug where when a new activation key is entered, it is saved but the manager appears to show that it has not.
  • Manager now uses compression to speed up log file transfers.
  • Manager connection editor now allows clearing of properties.
  • Added extra SFTP and FTPS properties to Manager connection settings.
  • Improved handling of socket accept errors.
Version 2.2.0
(2 June 2009)
  • Introduction of professional version supporting Windows domain users.
  • Now works on x64 machines.
  • MODE Z compression added for FTP and FTPS (also OPTS MODE Z).
  • Can now directly download log files to local disk.
  • Fixed SFTP authentication bug, where if the username was supplied in the incorrect case, public key authentication failed.
  • Users can no longer list /home, i.e. they can't see what the other user directories are.
  • Administrator can retrieve user list (Professional version only).
  • Manager now displays the version number.
  • Fixed FEAT bug (indenting too many spaces for each feature listed).
  • Fixed timeout that occurs in passive mode with large transfers if the passive timeout is set.
  • Fixed bug whereby SFTP admin could only log in once.
  • Manager now displays any critical server errors when connecting.
Version 2.1.2
(7 May 2009)
  • Can now call TYPE command in between PORT/PASV and RETR/STOR (which some clients do).
  • Administration functionality can now be performed via SFTP.
  • Invalid user names aren't immediately rejected, forcing hackers to try authenticating.
  • Fix for WinSCP problem with files very occasionally being truncated.
  • Provide alternative for obtaining machine id hash if email client is not installed (for product activation).
  • Fix problem with using a non-default home directory when creating a Windows user.
  • Fix resource cleanup bug when client abruptly disappears.
Version 2.1.1
(23 March 2009)
  • Added support for the XCRC FTP command to check file integrity.
  • Better feedback while installer is running.
  • Added diffie-hellman-group14-sha1 key exchange method.
  • Should now work on .NET 2.0 SP1 (previously required a minimum of 2.0 SP2).
  • Fix problem with generated FTPS certificate being initially invalid.
Version 2.0.0
(11 February 2009)
  • Now offers full support for SFTP (FTP over SSH). Support for password and publickey authentication, RSA and DSA keys etc.
  • Can now set logging level in the manager.
  • User's Guide expanded.
  • Generation of server certificate takes place on the server.
  • Numerous enhancements to the Manager.
Version 1.1.0
(12 November 2008)
  • Fixed license reading bug - sometimes the license was not read correctly, resulting in the server running in restricted mode.
  • Fixed user impersonation bug that meant special folders (e.g. My Documents) could not be navigated to.
  • Database and log files now stored in C:\ProgramData (or equiv) rather than in Program Files.
  • Default encoding is now UTF-8. Encoding can now be changed.
  • Added User's Guide.
  • Improved responsiveness of Windows folder browser.
  • Set default name of Windows virtual folder to name of actual folder.
  • Fixed FTPSEnabled property.
  • Added ability to add multiple windows users in one operation. Fixed NRE when NodeForm was cancelled.
  • More descriptive message when max number of connections exceeded.
  • Returns meaningful message when AUTH is used and FTPSEnabled is off.
  • Rearranged controls and changed text to make it clearer that the settings are the settings of the admin connection and not of the server itself..
Version 1.0.0
(10 October 2008)
  • First commercial version! After many months of further development and testing.
  • New manager, better FTPS support, remote administration, too many other new features to explain here.
Version 0.5.1
(5 December 2007)
  • Fix permitting LIST to accept '-' arguments.
  • Disable idle time forced logouts by default.
Version 0.5.0
(13 November 2007)
  • First release, supporting FTP and FTPS.