Download Latest Version v2.2.2.tar.gz (509.5 kB)
Email in envelope

Get an email when there's a new version of Poweradmin

Home / v4.2.3
Name Modified Size InfoDownloads / Week
Parent folder
poweradmin-poweradmin_4_2_3.spdx.json 2026-05-10 711.0 kB
0
README.md 2026-05-10 2.2 kB
0
v4.2.3 source code.tar.gz 2026-05-10 12.5 MB
0
v4.2.3 source code.zip 2026-05-10 16.9 MB
0
Totals: 4 Items   30.1 MB 0

✨ Highlights

Patch release for the stable 4.2.x line. Focus is hardened proxy header handling, group-owned zone visibility, and PostgreSQL compatibility fixes.

🐛 Fixes

  • Forwarded-IP headers (X-Forwarded-For, X-Real-IP, Client-IP) are now only honored when the peer (REMOTE_ADDR) is a private or loopback address. Direct-internet deployments stop trusting client-supplied headers, preventing audit-log spoofing and per-IP rate-limit bypass. Same hardening cherry-picked to 4.3.x, master, and develop.
  • Group-owned zones show the correct edit/delete controls in zone search and zone lists (#1200, #1194).
  • PostgreSQL strict typing on record_comment_links no longer breaks zone editing or record search (#1192). Both sides of the join are now cast so it works regardless of whether the linking column is INTEGER or VARCHAR.
  • Bulk record add correctly handles CSV escaping (#1199).
  • CNAME validation accepts numeric-string record IDs from the GUI (#1202).
  • API record edits honor the zone_content_edit_own_as_client permission (#1203).
  • Users API keeps auth_method in sync when use_ldap is toggled (#1195).
  • Zone templates: sync uses zones.id instead of domain_id (#1210); consecutive spaces are preserved in template content listings (#1212).
  • 404 page now fits the viewport without scrolling.
  • Bulk registration template links to group/user management (refs #1201).

📦 Upgrading

Drop-in replacement for v4.2.2. PHP 8.2+ required (unchanged).

Full changelog: https://github.com/poweradmin/poweradmin/compare/v4.2.2...v4.2.3

Source: README.md, updated 2026-05-10