Recent changes
Wednesday November 04 2026
-
Shop basket view name Updated Markdown page
Read this page if you run a shop on Exponential: you can now give the basket page your own name (for example /shop/cart/), and four shop bugs were fixed on the way, one of which changes which address line a customer…
-
Site packages no longer install extension packages Updated Markdown page
Since 6.0.15 no site package requires the extension packages ezwt_extension, ezstarrating_extension or ezgmaplocation_extension. Composer installs ezstarrating and ezgmaplocation (root composer.json). The installers…
-
The SOAP entry script is now index_soap.php Updated Markdown page
Read this page if an installation answers SOAP requests: settings/soap.ini [GeneralSettings] EnableSOAP=true, the syndication extension exporting content to other installations, or a middleware product that calls…
-
The SQL query cache Updated Markdown page
Read this page if your pages are slow on a full render (the first render after a purge, signed-in pages, the administration interface, scripts) and you want to switch the SQL query cache on, or if you restore databases…
-
Static cache defaults Updated Markdown page
Read this page if you use, or plan to use, the static cache (settings/staticcache.ini, bin/php/makestaticcache.php). Before this change the shipped settings generated nothing on a stock installation. The new defaults…
-
Static publishing Updated Markdown page
Read this page when you upgrade to Exponential 6.0.15 and want to know what static publishing adds to an existing installation and whether anything you have changes. In short: nothing changes until you switch it on.
-
The subitems list: Table options and its columns Updated Markdown page
Read this page if your editors use the sub items list in the admin, if you override children_detailed.tpl or its JavaScript, or if you want to add a column of your own. In Exponential 6.0.15 the Table options of the…
-
SVG images Updated Markdown page
From 15 October 2026 the image datatype accepts SVG images (.svg, and .svgz compressed with gzip) on every site, upgrades included. An SVG is a document a browser can run script from, so it is never stored as it was…
-
The trash view: who trashed it, where it was, what is below it Updated Markdown page
Read this page if you use the trash in the admin (content/trash), override its template, or run several web servers. The trash view now shows, for each item, where it was, what was below it, whether it can go back to…
-
Forwarded headers are trusted only from configured proxies (6.0.15) Updated Markdown page
From 5 October 2026 the kernel believes the forwarded request headers only when the connection comes from a proxy listed in the new setting site.ini [HTTPHeaderSettings] TrustedProxies[]. This page says what changed…
-
The administration design switch: what changed for developers Updated Markdown page
Read this page if you maintain an administration design, an extension that overrides kernel classes for the administration, code that reads the design settings or the design-base cache, or an installation that uses…
-
The UI switch: provider API Updated Markdown page
The UI switch lets a signed-in user change a preference of the administration interface itself (the "chrome"): the display language first, and whatever an extension adds. This page is for developers: the provider…
-
Approval of new user accounts: administrators approve new editors Updated Markdown page
Editors manage the site's members (member-management.md). Since 6.0.15 they may also create the account of a new editor, but that account is not published until an administrator approves it. Until then it cannot sign…
-
user/password: what changed for templates, settings and session handlers (6.0.15) Updated Markdown page
The user's guide is Changing your password. This page covers what a site, a design or an extension may notice after the upgrade.
-
Velocity engine upgrade notes (0.0.4.27 to 0.0.4.42) Updated Markdown page
Read this page before you upgrade the Velocity web server engine. It lists the behaviour changes that can affect an installation, in the order you meet them when you upgrade from an older release. Each section says who…
-
Velocity engines — Qbix, FrankenPHP, PHP's built-in server Updated Markdown page
Read this page if you run Exponential under Velocity (exp:velocity, vc), choose between its engines, or deploy PHP changes to a site that Velocity serves. Velocity drives one of three web servers with the same verbs…
-
Velocity on-disk layout (Debian Apache style) Updated Markdown page
Read this page if you run Exponential Velocity with the Qbix engine and want to know where its configuration lives, how to enable or disable a site, conf snippet or module, and what happens to an existing installation…
-
View counter 6.0.15: multi-site logs, resume state and what counts as a view Updated Markdown page
Read this page if you run the cronjob updateviewcount.php, or if templates or extensions show view_count or use the fetch content/view_top_list. The cronjob was rebuilt for 6.0.15 so that installations with several…
-
Request rules: securing content/view/full and every other module view Updated Markdown page
Exponential 6.0.15. Settings in settings/requestrules.ini. Code in kernel/private/classes/requestrules/. Command bin/php/ezrequestrules.php. Tests in tests/tests/kernel/classes/requestrules/.
-
Well-known passwords are refused, and a forgot-password link expires (6.0.15) Updated Markdown page
Three gaps in how Exponential 6 handles passwords are closed in 6.0.15: