A new version of phpList is now ready for download, introducing several changes.
You can get a copy of phpList 3.7.0 from the Download page and SourceForge. If you prefer the Dockerized version of phpList you can get a copy from Docker Hub.
For the full list of changes, have a look at the Release Notes below or head to the Release Notes page.
Security
Security has been strengthened in several areas of the application:
- Added CSRF verification for delete actions to help protect against unauthorized requests. csrf verification on del actions by TatevikGr · Pull Request #1121 · phpList/phplist3 · GitHub
- Prevented unsubscribe requests from being processed through HTTP HEAD requests. #1082 - avoid HEAD requests processing anything by michield · Pull Request #1086 · phpList/phplist3 · GitHub
- Added an option to verify SSL connections for improved security when connecting to external services. add SSL connection check option by TatevikGr · Pull Request #1107 · phpList/phplist3 · GitHub
Core Improvements
- Improved IP address detection, including better support for IPv6 environments. Detect ip6 with admin login by michield · Pull Request #1084 · phpList/phplist3 · GitHub
Authentication
- Added SAML authentication support for administrator login, enabling integration with single sign-on (SSO) providers. ISSUE-338: saml login by TatevikGr · Pull Request #1064 · phpList/phplist3 · GitHub
API
- REST API support, providing a foundation for integrations and external application access. update build · phpList/phplist3@98846b2 · GitHub
Bounce Processing
- IMAP-based bounce processing through the IMAP2 plugin. Added so phpList’s bounce processing still works on PHP setups without the native
imapextension (which got unbundled from PHP 8.4) ISSUE-341: add imap2 plugin by TatevikGr · Pull Request #1063 · phpList/phplist3 · GitHub
Campaigns
- Fixed RSS subject placeholder handling in campaign notification emails. Fix RSS subject placeholders in campaign notifications by ashishpatel1992 · Pull Request #1103 · phpList/phplist3 · GitHub
User Interface
- Added list descriptions to the Lists page. Show desc on lists page by TatevikGr · Pull Request #1108 · phpList/phplist3 · GitHub
- Added support for pre-selecting subscription lists on the subscribe page. Add preselect to subscribe page by TatevikGr · Pull Request #1111 · phpList/phplist3 · GitHub
Plugins and Integrations
- Added support for CKEditor 5. ISSUE-340: add ckeditor5 by TatevikGr · Pull Request #1071 · phpList/phplist3 · GitHub
- Updated the CKEditor integration. Update to the latest Common and CKEditor plugins by bramley · Pull Request #1081 · phpList/phplist3 · GitHub
- Updated the Common plugin. Update plugins by bramley · Pull Request #1085 · phpList/phplist3 · GitHub
- Updated the Updater plugin. Update plugins by bramley · Pull Request #1085 · phpList/phplist3 · GitHub
Translations
- Updated the phplist-lan-texts package to the latest version, including translation and language updates. Update phplist-lan-texts to latest master by TatevikGr · Pull Request #1109 · phpList/phplist3 · GitHub
Support
Need help upgrading your phpList server to the most recent version? Ask the community at discuss.phplist.com. Professional support from community experts, as well as manuals, source code, and developer resources can be found at phplist.org. Report bugs to the phpLIst 3 GitHub repository.
Want to focus on campaigns and forget hosting headaches? Sign up at phplist.com for an account with everything included. Send from 300 free messages to 30 million messages per month.
Community-made
This release is the work of Open Source community members who have submitted bug reports, security reports, and valuable feedback, as well as phpList Ltd developers. To get involved in phpList development, check out the developer resources pages.
To get involved in phpList development, check out the developer resources pages.
If you want to share the news on social media, you can use the links below:
Mastodon
Happy sending!