Recent changes
Wednesday November 04 2026
-
Moving a site from LoveStack Updated Markdown page
Most sites do not need to do anything. If you run Exponential and never ran LoveStack, nothing on this page applies to you. The features Exponential took over from LoveStack are part of 6.0.15, switched off where they…
-
PHP 8 review of LoveStack's fixes Updated Markdown page
LoveStack carries about forty fixes for PHP 7.2 to 8.3, made by Mugo Web between 2017 and 2026. Exponential, which runs on PHP 8.1 to 8.5, had fixed the same areas in its own way (for example #[AllowDynamicProperties]…
-
LoveStack features in Exponential: the detailed pages Updated Markdown page
Exponential 6.0.15 brings 36 features and a set of fixes from LoveStack, Mugo Web's distribution of the legacy kernel originally published by eZ Systems (mugoweb/ezpublish-legacy), into the Exponential distribution…
-
How the work was done, and what comes next Updated Markdown page
The LoveStack features came into Exponential in nine phases, in this order. All of them are done and part of Exponential 6.0.15.
-
LoveStack features: testing Updated Markdown page
Every LoveStack feature in Exponential is covered by PHPUnit tests in tests/tests/, written with the feature. This page lists them per feature and says how to run them.
-
LoveStack's tests in Exponential's suite Updated Markdown page
Besides testing each feature, Exponential compared LoveStack's own tests/ tree with its own. Mugo Web changed test files in 18 commits since the common ancestor (3429aa91bb, 9 March 2016) up to e61e9fdf0c (23 February…
-
LoveStack features in Exponential 6 Updated Markdown page
LoveStack is Mugo Web's distribution of the legacy kernel originally published by eZ Systems (mugoweb/ezpublish-legacy on GitHub and Packagist). Over the years Mugo Web added a number of valuable features and fixes to…
-
Upgrade notes: e-mail preferences and the mail gate Updated Markdown page
What changes when an installation moves to a 6.0.15 with the e-mail preferences: the new tables, the mail gate that every mail now passes, the mail that is split per recipient, the mail that is counted as uncategorised…
-
Mail: sendmail envelope sender, tip-a-friend sender, SMTP failures and random identifiers (6.0.15) Updated Markdown page
From 6.0.15 on, the mail layer hands sendmail only a plain envelope sender, content/tipafriend sends as the site, an SMTP failure of any kind is a failed send instead of an error page, and MIME boundaries and…
-
Member management: editors manage the site's members Updated Markdown page
Editors manage the accounts of the site's members: they create them, edit them (name, e-mail address, password), enable and disable them, move them between member groups and remove them. They never reach the accounts of…
-
Middle-Out: shared-dictionary compression Updated Markdown page
Read this page if you run Velocity's response cache and wonder whether to switch on MiddleOutCompression. It was introduced in Exponential 6.0.15, is implemented and tested, and is off by default. Most of this page…
-
Editing several items at once Updated Markdown page
Read this page if your editors change many items of the same kind, or if you maintain datatypes, edit handlers or admin overrides of the sub items list or the search results. The new view content/multiedit edits the…
-
Upgrade notes: notifications Updated Markdown page
What changed in the behaviour of the notification system, what you must do when you upgrade, and how mail that the transport refuses is kept. Read it if you run Exponential 6.0.15 or later, have overridden notification…
-
Upgrade note: authorizing an OAuth client needs the policy oauth/authorize Updated Markdown page
From 6.0.15 on, a signed in user may allow an OAuth client to act for them (the page oauth/authorize) only with the policy oauth / authorize. A user without it is sent back to the client with error=access_denied (RFC…
-
Upgrade note: PKCE and state for the OAuth authorization server Updated Markdown page
From 6.0.15 on, the OAuth authorization server of the REST API (oauth/authorize and the token endpoint POST /api/auth/v1/oauth/token) supports PKCE (RFC 7636) and sends the state of a request back to the client.
-
OAuth tokens: disabled users, client binding, refresh token lifetime and token sources (6.0.15) Updated Markdown page
From 6.0.15 on, the OAuth layer of the REST API (/api/... and the token endpoint POST /api/auth/v1/oauth/token) checks a token's user, ends refresh tokens after a lifetime, and no longer takes an access token from the…
-
OPML exports Updated Markdown page
Read this page if you publish RSS feeds from Exponential, or if you override the RSS edit and list templates. An RSS export can now be written as an OPML 2.0 document: a list of other feeds, the format feed readers…
-
A site package keeps the newer installed extension Updated Markdown page
Since 6.0.15, installing a package never puts an older copy of an extension in place of the one already installed. Before 6.0.15 an extension package replaced the installed directory whenever it was installed without…
-
The JSON package format Updated Markdown page
Exponential packages (.ezpkg, Setup > Packages, ezpm.php) can be written in a second serialization: JSON. It is the same package model as the classic XML format, element for element, so a package converts from XML to…
-
Where the page sizes live Updated Markdown page
Read this page if you want to change how many rows a list in the administration interface shows, or if you overrode a list template or module that used to have its page sizes written into it. Every paged list in the…