Back to Changelog
External API
v1.0.12
Fixed FTP account management on the external API to properly enforce passwords, plan limits, and directory isolation.
Bug Fixes
2- FTP account password change on the external API previously returned a fake success without changing anything; it now performs a real password update with ownership authorization.
- FTP account deletion on the external API now properly cleans up the corresponding proftpd virtual user.
Security Fix
1- FTP account creation on the external API now enforces password hashing, plan/quota limits, and home directory fencing instead of writing directly to the database, closing a cross-account directory access risk.