CrushFTP Changelog

What's new in CrushFTP 8.0.0

Oct 25, 2016

HTML5 based upload system with 4x faster upload speeds, resume support, and auto retry.
Federating servers...multiple servers linked into one Linked Servers, managed and monitored from the master server.
Limited Server allows for a server to run with restricted filesystem access for "user data" and "server config" areas.
Server memory can be set from the dashboard now
User data can now be replicated to another server via a journaled replication system
Recycle bin now resets the date for easier time based cleanup
UI improvements to CrushSync systray/menu item for quick access
updated SFTP libraries for more modern ciphers and architecture
updated threading model for higher performance connection handling
GoogleDrive for VFS data storage is supported now
copy task items between jobs
Job monitoring by user or group support
support for job organization in job groups
Dropped old plugins: PostBack,LaunchProcess,AutoUnzip. CrushTask replaces all of them.
updated reports UI, more enhancements coming
CrushClient local agent is a new tool which now has an advanced CrushClientUI
improved slideshow playback for large folders with thousands of images
support for password based encryption in PGP files instead of key based
allow editing SSH port setting changes without disconnecting current users
supports the proxy protocol v1 header for servers behind load balancers that want to know the user's true IP
allows for changing speed limits on the fly for existing connections
files can now be locked, unlocked for more of a content management system
allows an end user the ability to download a prior revision of a file that has been replaced
reports can be run at hourly intervals
IPv6 support for IP banning and limiting connections for ports or users
Ability to delegate a Linked Job out to a CrushClient running as an agent in managed mode.
jQuery library updates
Telnet debug utility available on all admin areas
Previewing a video file can play a lower resolution pre-generated file instead of the full version.

New in CrushFTP 8.0.0 Beta (Aug 22, 2016)

New in CrushFTP 7.7.0 (Jul 7, 2016)

New in CrushFTP 7.6.0 (May 7, 2016)

NEW:
saves backup copy of DMZ prefs when edited
added gene6 import for user manager.
now supports extra VFS controlling by limited admins
added {working_dir} to hack username URL referencing
temp share links with limited uses give a nice error screen now
adds md5 hashes to PGP encrypted and decrypted files
added replication to User Manager admin actions for new folders
added SQL connection pooling to statistics DB
allow for faster insecure session replication for segregated networks
added "Strict-Transport-Security" by default for 1 year
changed auth cookie to be HttpOnly
added startup_delay to prefs for slow servers, and CrushFTPDrive fix for auto reconnecting after network change.
added flag for ssh_sha1_group_kex_allowed, and adds auto retries for tunnel resets.
optimized CrushSync startup scanning and error recovery for network disconnects
CrushSync detects if sync folder is missing and creates it, and notifies on quota issues
updated PGP libraries to latest version
added copy/paste status and cancel button
added sha256 to as2, and warning if JCE is not using strong cryptography
added as2 mic alg control in prefs: as2_mic_alg
added byte validation for image files in Preview generation
FIXES:
fixes bug that doesn't block multiple job runs if saving state between steps is turned off
fixes (DH_GEX group out of range: 1536 !< 1024 !< 8192) on some linux distros
fix for PASV when using comma in PASV IP list
fix for multi merged VFS not doing PGP encryption
ignore bogus real name in PGP decrypt
fix for sftp properties in copy/move step being inherited wrong
updated builtin certificate to fix java compatibility issue.
fix for DMZ slowness processing logins
fix for extra_vfs items using underscore chars
fixed issue with DELETE events not tracking non FILE protocol deletes
fix for https port startup issue
speed improvements to CrushTask dealing with Jump tasks and large numbers of items
fixes for schedule timing
fix for upload event triggered by rename action
fix for server socket binding to all IPs
fix for error event having no message on aborted downloads
fix for SNI and FTP PASV
fix for PGP encypt not calculating new file size
fix for limited admins and extra VFS entries
fix for hard coded java path on windows, and failed login count tracking
fix for blocked filename chars
fix tolerating bad schedule configurations
fix for DMZ password request reset slowness
fix for java service installs
more java service fixes for windows scenarios. remove and reinstall for the path fix.
updated SFTP libraries to fix SCP
speed improvements for DMZ directory listings
honors disabled ciphers for outbound S3 connections
fix for daily log rolling being missed on systems with many session logs
fix for replicated VFS
fix for SFTP zipstream expansion
fixes for logins in FF and some IE versions
fix for direct linked URLs with user/pass embedded
fix for sftp uploads in DMZ indicating a dir was being replaced and not working
return user manager save errors to the browser
fix for scheduling related to daylight savings time change
fix for showing partially uploaded S3 files everywhere and not just in their faked path
replicated VFS fix for deletes
fixes for SFTP uploads with overwriting of a folder, DMZ and direct
fixes for advanced mode applet not keeping current session
multi_journal and replication stability improvements
fix for CrushTunnel.jnlp logins
fix for CrushSync when dealing with hundreds of thousands of files/folders and multiple sync agents.
fix for CrushSycn startup downloading files with no date set
fix for priorities in ServerBeat and CrushSync folder uploads
added tweaks for multi_journal reliability
fix for pgp encrypting on the fly for downloads
more fixes for data multi_journal data replication
blocks zombie anonymous users, and ssh library updates
fix for long running paste operations
fix for CrushTask Find leaving threads open
fix for DMZ lookup of LDAP public key
fix for temp job cleanup, and filename filters on HTTP downloads
fix for slow PGP downloads
fix for test login on S3CrushClient

New in CrushFTP 7.5.0 (Jan 10, 2016)

New:
added redirect in WebInterface for forced preview/download
added flag to control "stor_pooling" for HTTP uploads.
attachment redirector logging improvement, added delete & rename to AccountActivity Report.
sped up the processing of large file lists in Jump task of jobs
added SNI support for FTPES
multithreaded deletes
watches for changes in local DMZ prefs files too
added sha1 flag for SSH, defaults to no sha1 key exchanges
Fixes:
fixed multithreaded upload handling to same HTTP session.
fixed bug with browser uploads
fixed cipher suites for SNI HTTPS sockets.
task error fix for null scenarios
fix for SMB url username/pass replacement
fixes for AttachmentRedirector and folder shares
fix issue with transfer speedometer creating load on session replication. _12:fix for WriteTask and multiple writes to the same file from different locations
fix for video streaming in safari
fix for setting meta_info
fix for unsafe filename char replacement in http uploads
canceling upload in advanced mode didn't report it as canceled
ServerBeat fixes for out of sync server times
fix for ServerBeat and bringing serers back online.
fix for age on ServerBeat
fix for DNS PASV IP reply
security patch
WebInterface changes:
Fixed issues with events not being saved
Fixed issue creating new server
Direct link to preview files fixed
Date formatting fixed for internal shares
Explore zip fixed
New upload customization : Max number of files allowed in a queue, Hide start upload button on individual item
Fixed home directory not being saved while using plugin in events
Fixed auto load applet customization issues
Managing ciphers is easy now, UI updated
Date format is honored now in reports
Added TLS client versions
User can use alternate media file in previews (h264, user defined)
IE11 theme fix
Sharing related issues fixed
Added missing localizations
VFS linking logic changed
Fixed issues with removing users not getting removed from groups
Buttons list is now organized with filters in UserManager
Fixed ftpes issues
Added max runtime for the job schedule
Added support to get history of item and download older version
Video player UI/progressbar updated
Added reply-to in email templates
SAML and LDAPGroup plugin fixes
Fixed telnet UI issues
Added export support to SSL items
Added quick editing roles on SAMLSSO and LDAPGroup
Added temporary job log settings in preferences
Added new customizations

New in CrushFTP 7.4.0 (Nov 6, 2015)

New:
adds flag to block quota logging in FTP logs. hide_ftp_quota_log
added locked permission for a folder in the VFS, sub items are not locked.
added UI component for importing CSV user lists in the User Manager
added hash_algorithm to prefs to control MD5 or SHA256 hash to use for tasks references
allows passing in parameters via URL for inclusion in forms
adds control for S3 multi-threading.
internal session replicated servers keep prefs synced.
added max URL length to prevent overrun on NTFS file systems
DMZ passes error events to internal servers
added signature validation for sync MDN
added SAMLSSO plugin
made job scheduler more robust
added http hammering connection settings
added s3crush replication
adds batch complete event hook to as2 files received.
added job/event to be triggered when a temp share expires
added support for OPTS MLST command variations
performance improvements for user manager with many thousands of users
support for multi-page PDF files.
adds support for dns lookup for PASV ip reply
added minimum speed warn and alert configuration
added variable VFS names in file listings
updated PGP libraries to latest build including bouncycastle
added flag for optional global ASCII PGP encoding instead of binary
added SHA3 password hashing storage method
fix for ascii pgp encoding and header size info
added max upload and download counts
added logging to track where a job was called from with remote job runs
added separate s3 threads counts for upload and download
added support for limited admin to view lob list without being able to view job.
enhanced AttachmentRedirector so its easier to setup and use
added multi-threading to delete task
SMB root items the user doesn't have access to now disappear and faster VFS root dir lookup
updated to latest SFTP client libraries
updated jQuery libraries
Fixes:
fix for speedometer thread leak
fix for duplicate name on top downloads and uploads report
fix for job scheduled running at a minutely interval
fix for password reuse.
fixes for multi write VFS system
fix for VFS local merge
fix for VFS merge
better cache management for DMZ and file listings.
fix for shares being created through DMZ
fixes for AS2 through DMZ
fix for email from addresses, and crushtask copy with temp name
fix for SFTP through DMZ under load throwing error during file transfer, and port cleanup
fix for DMZ uploads disconnects not being reported properly on internal server
fix for login counts for success/failure on dashboard
updated ssh library for threading fix.
fix for events treating files as directories.
ui fix for ftp settings in copy task, + sign in add after copy, and ftpclient stat processing.
fix for fast SFTP transfers and setting modified times at the end of a transfer
fix for DMZ uploads with network timeout and reporting error in event.
fix for user sessions being left listed as active in DMZ scenario.
new ssh library to fix deadlock scenario.
fix for race condition in DMZ with upload and rename
fixed timeout for session replication
fix for events running on disconnect before disconnect
fix for potential logging loop with plugins
fix for aborting uploads through DMZ and events.
fix for concurrency issues with uploads through DMZ
fix for replicated users with one server offline for extended period of time.
tunnelv3 is more stable and handles server restarts
sftp library update to fix issues with non conforming clients.
sftp race condition fix for fasts uploads
fix for dmz file being canceled and event not tracking it properly
improvements for memory handling in S3 with slow users connected.
fix for removing plugin instance
fix for rename issue in list view
fix for dmz scenario with copy/paste of larger files
fix for stats saving performance
fix for aborting file in DMZ/multiple internal server scenario.
fix for share permissions with quota value.
fix for s3 zipped folder download
fix for mis-calculated size of encrypted PGP files
fix for logged user data when making user changes
fix for logging bug
pass as2info to internal server in error scenarios
prevent sftp client logging
fix for job designer when zoomed out dragging was broken.
CrushTask logging fix
CrushTask logging fix
fix session logging error.
added ability to not save job items to disk to save memory
fix for machine's hostname that can't be resolved and session replication.
fix for next run scheduled job display time
fix for tunnel3 in CrushTask
fix for bad SFTP server listings from our client
fix for doubling of buttons in WebInterface for SQL Users
fix for fixed width import in CrushTask
fix for utf8 chars in s3 buckets
fix for failed PGP in-stream alterations leaving file in use when in error
fix for applet retries on permanent failure.
fix for space character and S3
fix for + signs in new url encoded s3crush
fix for s3 logins needing a bucket name.
fix for AS2 race condition with multiple internal servers and events
fix for job replication in HA scenario
fix for AS2 in DMZ and multiple internal servers
fix for password reset by token
fix for mlst format and FileZilla.
fix for user manager events loop in UI.
fix for repeating lines in share email body
additional debug logging for DMZ port handling to internal server.
AS2 fix for non DMZ scenario, and calculating MIC with SHA even if not signing.
fix for recycle being attempted for remote connections.
fix for SAML/SSO ACL usage.
fix for log view access not being able to choose alternate logs.
fix for oracle result sets in CrushTask.
fix for bug with blocking characters in upload
fix for SAML cleanup thread
fix for user manager limited admin with bad event item
fix for Tunnel3 and abrupt disconnects
fix for tempaccount expire date display in admin view
fix for # sign in passwords with CrushClient.
fix for {share_ variable usage.
fix for zero byte files in SFTP
better MIC tolerance in AS2
uses better random generator
blocks CRLF in header request
fix for stuck sftp threads, and differential upload fixes going through DMZ
fix for sharing an item that uses PGP for decryption
fix for tunnel3 memory usage
fixed relative paths for custom event triggering by button
improves detection of bad S3Crush items
fixes issue with stand alone client and blocked file uploads
fix for browser uploads of 0 byte files
fix for job scheduler and left over old XML files
fix for downloads not excluding invisible items
tunnel3 memory fixes
fix for webdav large uploads
fix for copy task multi-threaded
fixes for memory handling in Tunnel3, and performance improvements, fixed Move task folder issue
fixed for SAML signing authN request.
fix for bad ftp client upload check
another bad ftp client fix
fix for job using FTPES and client cert auth and updated Base64 implementation
fix for SAML base64, and Win10,Win2012 CrushFTPDrive
fix for multiple internal servers and session replication delay
url encoding fix for keystore import
URL encoding fixes for importing SSL certs
fix for job browse for file system items
fix for upload and rename events and ssl keystore password decryption
fix for find and max items in jobs
outbound SSL connections will now use TLS1.2 if available
fix for find task and don't add folders with limited amount of find items
fix for S3 using IAM temporary credentials
fix for User Manager server's file listing
fix for resuming S3Crush uploads
fix for next run displayed date calculation for a job.
fix for LDAP reverse group lookup and referenced template user

New in CrushFTP 7.3.0 (Mar 11, 2015)

New:
added check for update to check build
added sort task item
added download of HTTP response item in CrushTask
added {protocol} variable for crushtask.
allow controlling max outgoing http buffer (GDrive).
posix group supports variables.
crushtask error scenarios pass in the item of error now for variable references
added block overwrite pattern to crushtask copy/move
added append mode for CrushTask
improved job report schedule to give more details.
FTP now uses configured TLS versions
added CrushTask process only first item flags across most task items
tunnel version 3 is now available
added session cache async to disk
individual session logging can be disabled
adds copy unique name pattern
added custom user session log location
CrushClient can handle command line file transfers and be scripted out.
Added support for DES: scheme on passwords.
auto remove old expired internal share references
added new report for failed logins
added randomize home folder name for LDAP
allows forcing delays between commands in SFTP protocol.
jobs can be limited to one instance per server, or per cluster of servers
added type variable for deletes and renames
added type variable for downloads and uploads
added support for custom upload form meta info from DMZ
added priority to serverbeat
added ability to run a linked job on a DMZ server.
added ability to do chunked native uploads in web browsers for faster upload speeds.
added pack200, Z,XZ,LZMA compress/decompress types for CrushTask
added support for connection profiles in jobs.
added user and count info for security user hammering alert
added alert type for when CrushFTP is restarted
dmz security alerts are forwarded to internal server
added trim function support for text functions and auto trims alert_msg
added additional ban security alert.
added remote file client for running processes as a user in windows.
added ability to route as2 connections out through a DMZ.
added as2 message signature validation options
added ability to compute basic math expressions in CrushTask variables
added event for when a suer shares
added tag to log output, and support for google captcha v2, and logging tags at the start of the line
added custom event type
http sessions can now honor session timeout configurations overriding the http session timeout value
added ability for Link job task to run on other internal servers and other where to run choices.
added support for bind_ip parts in template user
added auto retry on loading usernames from XML
added resume support for S3Crush
improved DMZ logging, added alert type for month items
added 's3_max_buffer_download' flag to control memory usage on S#Crush downloads.
added segmenting support to s3crushclient to overcome resume issues on large files
added max upload/downlaod day and month available amount value support for web listings
csrf protection is enabled by default now
sped up S3 plain connections via caching
added cwd_stat flag for ftp client
added support for dir size calculations in WebInterface.
added ASCII flag for PGP ecnryption on the fly for VFS.
added temp_name feature to coyp and mvoe tasks.
dmz prefs now have new properties added by default
faster job jump/link scenarios with less delay.
added EXPORT ciphers to permanent disable list.
enhanced advanced mode transfers on resuming, and overwrite scenarios.
Fixes:
fix for rapid user logins potentially causing one to fail
fix for colliding VFS not allowing listings
webdav client fix over https
added comments to internal shares
added LDAP support for SSH key based auth lookup
fixed saving users in User Manager
fixed job cleanup for temp user event jobs
fixed bug with & in registration name and preferences
rolled back to acl2 mode for default operations
capture error on ftp logout when login didn't work, and don't make folders in popimap task
fix for dmz and linked VFS
fix for S3 downloads of entire folders.
fix for DMZ memory leak.
fix for CrushSync startup re-uploading offline deleted files on windows, and keyword creation for zip files.
fix for crossing data socks in multithreaded http upload in same session (crushsync)
fix for session replication clearing old sessions
fixed mecmache to have folders as well as files
fixed no content popimap bug
fixes for bad firewalls on FTP connect
fixes bad user.xml writes under load
fix for restoring jobs
more heavy load protection for single user account writes
race condition when downloading tiny files with SFTP
fixed job progress line tracking
fixed session cache and session cache on exit
allow sha or sha-1 AS2 mic responses
no longer checks for encrypted header size when items are internal VFS references
fix for DMZ/internal server with replication deadlock
fix for copy/paste folder in DMZ
fix for popimap task
fixed bug with session replication frequency
don't save prefs.xml file as regularly.
fixed bug with task to run when account is disabled.
fixed bug with manage shares removing valid references.
multiple ldap configs were not being checked properly.
fixed reverse proxy.
fixed password history logic.
fixed temp filename extension renaming when done
fixed move task not closing SFTP connections.
fixed url and name replacement variables in CrushTask.
fixed bug with server not tracking last_logins for reports.
fixed bug with DMZ downloads and advanced downloads
fixes potential deadlock issue under high load
fix for upload file type
fix for date variables in CrushTasks.
fix for viewing suer log
fixed caching bug with password history validation
fixed as2 task sending when dealing with many files.
fixed default threading issue with s3 not uploading large files.
fix for http uploading
fix for serverbeat master scenario
tunnel3 protocol is stable now.
fix for urldecode issue in cut/paste, and socks proxy by IP
fix for alerts missing the msg part.
fixed webinterface uploads timing out when they are slow to start
fixed RFile to work with service
fixed PGP trailer size for SCP
fix for importing trusted keys into PFX file
fixed bug with PASV response and private IPs
fixed pasv IP response scenarios for private networks and public
as2 variable fixes
fixed bug with upload form data going through DMZ
fixed loading connection profile for uservariables
fix for finishing a file upload
fix for receiving MDN through DMZ
hides column on expiring account report for not in use.
fixes issue with session timeout in clustered environment
fix for creating share in DMZ mode
fix for running multiple same named events at the same time, and fix for replicated DMZ share creation.
fixed bug with DMZ and multiple VFS locations
fix for client cert auth with CN at end of subject
fix for sending trust store for client cert auth to DMZ
fix for password issue in DMZ
fix for & in browser uploaded names
changed redirection to use relative path
fixed bug with keystores in memory in DMZ and AS2
fix for excessive memory usage on really large file uploads with S3.
fixed delayed initial login window
fixes for log rolling to be less abusive of CPU
fix for sftp uploads where session is closing before upload is completed
fix for double security alert notifications for bad_login and DMZ
fix for DMZ race condition missing replies.
fix for FTP proxy scenario for bad FTP servers that don't start you in / and don't implement stat properly.
fix for deleting partial failed uploads when suing a temp extension during upload
fix for http task and cookies
fixed s3 url selection bug
fixes for star_stat mode for proxying to windows IIS FTP servers
performance fix for star_stat and large directories
fix for ensuring http upload completes on tiny files
ftpclient proxy speed improvement
fixed memory usage in S3Crush.
allow file XML errors to be logged
fix for path consistancy on delete CrushTask
fix for raw S3 throwing errors when finding files that were in progress
fix for anon and null ciphers
fix for multiple http uploads in same single session having socket issues
fix for dir listings paths with filter
fix for job scheduler run timing issue.
fix for SFTP memory issue
fix for SFTP upload queueing.

New in CrushFTP 7.2.0 (Nov 5, 2014)

New:
tunnel improvements for disconnected sockets
multi segment downloading from S3 bucket
thumbnail previews now operates on VFS items and not just local file:// references (SMB, FTP, SFTP)
task have {working_dir} variable they can access
added link task
added support for Job references in folder monitor, alerts, and events
allow access to server_info variables
support custom java classes for task type
added additional cache options for FindCache, Copy/Move cache
added date time scenarios for Wait task
allow settings the supported MACs for SFTP
sftp can do multithreaded listings
support and / or operator for WebInterface search
added alert type for monitoring server variables
hide actual file path from upload exceptions
improved SQL speed for users stored in a DB by using better caching methods
allow mass updating of users as a limited admin, not just full admins
supports MSSQL for StatsDB now and reports
ignores requests for getadminxmllisting by non admins and limitedadmins
allow share generation to suggest a user/pass to utilize
support s3crush revision tracking
allow a user to upload and overwrite a file that was in use by them (from a leftover dead connection)
increased SFTP buffer size default to improve Linux performance issues
stop excessive user backups done at every login
allow events to be applied to only shared accounts a user makes
removed duplicate login event call
added user usage report
improved job monitor speed to ask for less info unless needed
server log now set to click to activate
added minimum upload speed, and minimum download speed restrictions for alerts. (negative value to trigger an alert)
multithreaded CrushSync uploads and downloads
tunnel improvements for disconnected sockets
added accelerated multi segmented downloads from S3
better memory handling to keep caches clean dup after they won’t be used again
added ability to cache all local file items in memory for faster searches
added magic ports starting with 444 in tunnels to know if the port is FTP or HTTP
added test VFS button
crushftp defaults to TLS mode by default, SSLv3 is optional. (Poodle vulnerability fix)
supports unencrypted DMZ connection for speed
webInterface supports file sizes on folders when uploading with advanced mode
added memory based filesystem support for temps storage location
added {working_dir} variable to CrushTask
added Link task to link in other jobs to a job.
more variables are accessible to crush task action now, all sever_info items
added support for custom CrushTask java task items from 3rd parties.
added support for modifying FindCache references in CrushTask for Copy and Move actions
added date and time scenarios to WaitTask until…
added support to “touch” a file sign a rename
added garbageCollection on demand calls to CrushTask.
added MD5 file hash calculations on file copies in CrushTask
added file timing on CrushTask Copy actions
added {full_log} variable reference for CrushTask which could be embedded in emails
AS2 supports HTTPS client cert auth
added completion types for CrushTask of killed, cancelled, or completed
allow setting custom headers in HTTP CrushTask items
PGP task supports hinting on decrypted file size
added looping on email ask to attach one file at a time
added support for starttls on PopImap task
drastically improved the speed of short running jobs
added {MMMM} for full month names in CrushTask
allows any heap memory size for CrushFTPDrive and CrushSync
added sync now menu item to force a sync in CrushSync
added growl style notifications in CrushSync to warn you if sync is offline
added last_login tracking for User Manager accounts
added max_logins onto User Usage report
added {web_link_end} variable for Share email body
support quota usage for plugin based users
added support to generate heap dumps for admin users for troubleshooting
added support for Radius challenge / response system for one time use codes
added max expiration day config for shares and default expiration days
added support for responding with failed MDN messages
added reverse connections for ports in DMZ scenarios
added audit report and started tracking additional audit items like rename, delete
added support for events running in async mode event by event
added support to find user for password reset when in SQL mode for users
added history tracking for current uploads/downloads in progress for admin UI graphs
added per user password salting support
added job queueing for async events
added salt to tab delimited import
increased ACL lookup speed for LDAP ACL mode
added {size} for sharing email
added net mask support for ServerBeat
added support for events and statistics on copy/paste actions
added control for max event threads.
supports smtp mail From with pretty formatting
hides MACOSX garbage items from zip previews
added flag to control writing session logs
added progress bars for searching in WebInterface
added date/time localization support and many other enhancements for localization
added login page themes in the prefs for quick customizations
added new report JobSchedules
added new report AuditSummary
added hover over info in dashboard to see transfers that were in progress during bandwidth usage
check for update now looks for new builds too
added more controls in PGP task for signing and verifying
added port forward server time type
added mass update for banning list to past in text
enhanced radius plugin supporting more custom folders at login
enhanced LDAP plugin to support individual key mapping
enhanced job monitor to add breakpoints between all steps or clear breakpoints
added sort task item
added test button for custom VFS items in the User Manager
added option to optionally not save state or history if so desired for jobs/events
added multithreading capability to CrushSync for faster transfers of small items
Fixes:
fixed some SMB issues for rename move actions
fixed bug with find task when no times begin found not throwing an error
fixed multiple s3 buckets in single VFS
fixed name reference when times are unzipped
fixed job restoring after a server restart (multiple threads scenario)
webdav fixes
fixed max login time and dmz scenario
fixed encrypting the URL in VFS
fixed VIP movement issues with ServerBeat when both machines are offline
fixed memory leak with prior FTP sessions
fixed missing log entries for HTTP/SFTP RETR & STOR operations
fixed SSL manager error with blank trusted cert list
fixed csrf on downloads
Jobs UI fixes
login.html file redirection link restriction fix
sftp logging fix
fix overwrite not working on File objects when specified
fix for s3 downloads no closing properly
fixed client cert auth connects for HTTPS
fixed symlink support for SFTP client instead of removing them from listings
fixed SMB authentication errors
fixed DMZ internally routing connections through internal server not working
fixed bugs with known_host file support in SFTP client
fixed restoring a job after server restart and loading up prior cached file info
fixed names on CrushTask unzipped items
fixed file length references on CrushTask copied items
fixed UserList task on how it calls its subtask items
fixed closing connections bug with CopyTask actions
fixed bug with running multiple copies of the same job simultaneously (called from an event)
CrushSync threading fixes when multiple syncs are configured at a time
protects against getting banned during an upgrade
increased time-out for CrushSync and really slow dir listings
fixed bug with email templates with spaces in their name
restored http header access for plugins
fixed issue with TempAccounts and DMZ mode
fixed dir listings for FTPES clients and empty folders
fixed date locale for miniURLs
don’t waste connections on TempAccounts with a limit configured
fixed bug with upper/lower username case flag
fix race condition for plugin loosing active username info
fixed bug with access-allow-origin not working
fixed bug when log rolling greater than 20 days
fixed deadlocks scenario where the server could freeze under the right scenario
fixed bug taking down DMZ instance
improved socket cleanup for high load
fixed reverse proxy not matching path too
fixed default SQL config with datediff
fixed keystore arrangement of certs when adding in trusted certs
fixed bug with change password while having SMB or S3 filesystem
fixed bug in SSL test not testing the keystore properly
fixed bug where field login count wasn’t reset on success
fixed excessive logging in WebInterface actions
fixed DMZ bug with bad username/email requests
fixed linked vfs and SQL User Manager.
no temp rename on upload for S3Crush objects
fixed missing keep-alive header on redirect
fixed locked auth object for SMTP email
improved CSR generation for UK customers
fixed as2 message ids
fixed issues using TLSv1.1 and TLSv1.2
fixed hanging dir in SFTP when no files existed
fixed errors on mass uploads where cleanup is discarding them
fixes for UNC paths and Preview generation
fixed media playback with MP4 files and improved slideshow handling of MP4
fixed issues in the job monitor for active jobs not refreshing right
fixed issue with duplicating events

New in CrushFTP 7.1.0 (Jul 8, 2014)

New:
Introducing AttachmentRedirector - redirect Outlook attachments through your corporate CrushFTP server for Enterprise users.
http://www.crushftp.com/crush7wiki/Wiki.jsp?page=AttachmentRedirector
ServerBeat has been rewritten to be more robust and no longer uses JGroups. Allows for active/passive job handling too.
Allow binding session replication to a specific IP
Allows greater than and less than signs in emails
SessionReplication now handles error conditions and higher load.
All around session handling has been significantly improved.
Improved WebInterface slideshow
Improved WebInterface streaming movie player
Re-activated WebInterface drag and drop support.
Added support for delayed uploads that will start at a later specified time.
Added page/tab title upload percentage tracking.
Added localization language selector into WebInterface for dynamic changing of the language.
Job designer improvements for displaying the active job progress and items each step processed.
Added submenu capability to WebInterface buttons.
Added duplicate VFS item and ability to copy VFS item from one user to the next.
Supports routing Execute CrushTask commands through a DMZ server with Enterprise licenses.
Uses internal URL handling for HTTP commands in CrushTask HTTPTask items.
Added KillTask, DecompressTask, and CompressTask items
Allows use of expired PGP keys.
Added functions for CrushTask to handle substring, replace, and split operations during variable replacement
Added false scenario route for the Jump task
Added route tracking on tasks
MoveTask can better handle moving a folder structure
Added warnings about PGP key sizes needing Java policy files
Added PGP verify and sign support to PGPTask
UserVariable can now target the first or last item in the list, and also “pop” it off the list.
HTTPTask can now upload the file contents
FindCache can now reference items locally or remotely.
Support routing a connection through a specific DMZ instance
Added SOCKS and HTTP proxy for routing outgoing connections
Added SMB protocol support to VFS and CrushTask items.
Support multithreaded S3 transfers and other major improvements to S3 protocol.
Added S3Crush protocol for CrushTask and VFS to allow fast interactions with S3.
Added OS/400 protocol support with its terrible system of folder simulation.
CrushTunnel now minimizes into the systray/menubar and can be revealed on demand.
DMZ communication now "sticks" a connection to a server unless the server goes offline.
PGP in stream usage now uses binary mode and not ascii mode for faster transfers
Advanced mode applet does zip64 to support very large files and still allowing compression
CrushFTPDrive supports more variables in the JNLP file for startup configs.
CrushFTPDrive can route through a proxy now.
CrushFTPDrive reconnects after machine sleep or other interruptions much better now.
CrushFTPDrive uses a system driver to simplify the initial installation requiring no reboots.
CrushSync now makes installing a startup shortcut optional
CrushSync can route through a proxy now
CrushSync supports only checking the size of files
CrushSync supports realtime only mode only capturing events that happen while running.
CrushLDAPGroup now has a browse function to help you choose the right path to choose.
Allow setting the full permissions to use when doing a Full Access temporary share.
AS2 adds SHA256 support.
UserFolderPermissions report adds the notes field to the report.
SMTP email supports more Auth modes.
Hack detection can be based on a URL pattern or HOST header.
Max expiration days for Shares is the default setting in the User Manager customizations.
Added WingFTP import
Remembers bad usernames for TempAccount attempts to prevent abuse.
More support for PFX and PKCS12 formatted kesytores.
Show the user when their account will expire.
Added CSRF protection to prevent hacking.
Allow defaulting a username for the login form
Supports only allowing a single instance of a job to run at a time.
Added ShareBodyEmailClient to have a separate text only body for opening in email client.
Added publish and attach for temp shares
Added convert passwords function to force all passwords into a particular hash mode if they are currently DES.
SSL improvements to assist with CSR handling. (Simple 3 step process now.)
Added offline update handling once users are on 7.1
Added support for quota reporting when going through DMZ
Supports multiple server session replication (3+)
Internal code cleanup and refactoring to help with HTTP session racking and simplify further development.
Added SharesSummary report item
Performance improvements, better memory management
Allows temp share by Copy mode for non local items.
SSL SNI support is possible when using Java 8
iCal fixes for WebDAV calendar requests
Better event item grouping and tracking
Fixes:
dealing with more than 400 items in a list with CrushTask
multithreading in complex task scenarios.
email address formatting in PopImapTask
replace all LINE references in CrushTask and not just the first one
"not" condition on the jump task was ignored
browsing inside a zip using windows.
space encoding issue for webdav servers
modified date bug in SFTP client.
FTPES files transfers of 0 byte files
Java applet uploader fixes with file size of sub items
pgp decrypt and encrypt both at the same time in-stream was only doing one, not both
fixed bug starting multiple tunnels at one time
fixed bug with start on login for CrushFTPDrive /CrushSync and newer Windows OS versions
fixed CrushSync downloading a file as a folder.
service install / uninstall fixes for Windows.
fixed issues with old job cleanup
bug fixes for slow socks5 proxy clients
bug with cut/paste and a CrushSync agent monitoring the folder
fixed issues with some linux distress free disk space reports
fixed issue with lost events on run immediate and a fast client logout after the transfer.
fixed issue with abusive sftp clients and DMZ mode
fixed various bugs in internal ReverseProxy implementation and deployed it as front end for crushftp.com
DMZ mode and download as zip fix
AS2 MIC calculation bug
copy/paste bugs in WebInterface when pointing to non local folders
fixed bug with temp job cleanup
fixed email password and email token for pass reset in DMZ mode
fix for DownloadAsZip when your in an invisible folder.
reports now indicate if no data was found for sport instead of just being blank
fixes bug in log rolling when log folder has other items in it
many DMZ improvements ins speed and stability
WebInterface added missing localizations.
ie8 issues fixed in WebInterface
fixed issue with CrushFTPv6 import of jobs using references to global plugins.
various fixes on Browse popups in WebInterface to correctly choose paths.
fixed issue with cloning plugins

New in CrushFTP 7.0.2 (Feb 7, 2014)

7.0.2 fixes SFTP listing issues with some clients, and fixes a hidden button bar on the WebInterface.
New:
Dashboard for server administrators
Role based administration so you can delegate some administration tasks to users.
Job scheduler (Enterprise only), and events have a new Task designer interface that greatly simplifies creating task flows, and monitoring in realtime the progress of a Task.
MP4 streaming playback in WebInterface with ability to skip to any point in the file.
SSL Certificate manager to simplify using existing certificates, and requesting new ones.
Automatic port forwarding using UPNP and PMP to simplify router configurations.
Built in self diagnostics and testing for server ports to quickly verify outside connectivity is working, and get meaningful suggestions for the issue.
Quick find system to search for a parameter, setting, user, etc. quickly with a hot key.
OS X journaling tool improvement for CrushSync tracking in realtime the changes being made so they can be synchronized.
Users sharing files can automate the attaching of the file into the email.
Full file indexing can be enabled to allowing searching file contents.
Limited user admin can make and manage their own sub groups.
Session replicated and clustered servers have their settings saved between multiple servers, and user manager changes sync also.
Outgoing connections through the VFS or Jobs/Tasks can be routed out through a DMZ server instance.
Shares can have limitations put on the usage of the expiring link allowing a limited number of uses.
Better log grouping for HTTP sessions that may span multiple different sockets.
Internal shares can automatically issue an email to the recipient, or attach the file.
Individual accounts can be disabled after too many attempted logins, or a general IP can just be banned from trying anything.
Zip files can be opened, and navigated through all protocols, and individual files can be downloaded from inside of them.
GDrive integration where the back end file system can be a Google drive.
CrushLDAPGroup can honor ACL permissions assigned in NTFS for authenticated users.
Hashed password stored in CrushFTP can have a salt applied to make them more unique.
Tasks can survive server restarts, resume where they left off.
Tasks can be clustered where multiple servers can take over the same tasks if one server goes down.
Supports acting as a Socks proxy, and HTTP Forwarding proxy server.
Jump task items have more controls on the logic (Enterprise only)

New in CrushFTP 7.0.1 (Feb 4, 2014)

New:
Dashboard for server administrators
Role based administration so you can delegate some administration tasks to users.
Job scheduler (Enterprise only), and events have a new Task designer interface that greatly simplifies creating task flows, and monitoring in realtime the progress of a Task.
MP4 streaming playback in WebInterface with ability to skip to any point in the file.
SSL Certificate manager to simplify using existing certificates, and requesting new ones.
Automatic port forwarding using UPNP and PMP to simplify router configurations.
Built in self diagnostics and testing for server ports to quickly verify outside connectivity is working, and get meaningful suggestions for the issue.
Quick find system to search for a parameter, setting, user, etc. quickly with a hot key.
OS X journaling tool improvement for CrushSync tracking in realtime the changes being made so they can be synchronized.
Users sharing files can automate the attaching of the file into the email.
Full file indexing can be enabled to allowing searching file contents.
Limited user admin can make and manage their own sub groups.
Session replicated and clustered servers have their settings saved between multiple servers, and user manager changes sync also.
Outgoing connections through the VFS or Jobs/Tasks can be routed out through a DMZ server instance.
Shares can have limitations put on the usage of the expiring link allowing a limited number of uses.
Better log grouping for HTTP sessions that may span multiple different sockets.
Internal shares can automatically issue an email to the recipient, or attach the file.
Individual accounts can be disabled after too many attempted logins, or a general IP can just be banned from trying anything.
Zip files can be opened, and navigated through all protocols, and individual files can be downloaded from inside of them.
GDrive integration where the back end file system can be a Google drive.
CrushLDAPGroup can honor ACL permissions assigned in NTFS for authenticated users.
Hashed password stored in CrushFTP can have a salt applied to make them more unique.
Tasks can survive server restarts, resume where they left off.
Tasks can be clustered where multiple servers can take over the same tasks if one server goes down.
Supports acting as a Socks proxy, and HTTP Forwarding proxy server.
Jump task items have more controls on the logic (Enterprise only)

New in CrushFTP 6.4.0 (Oct 23, 2013)

New:
iOS can stream videos from WebInterface
Java 7 support for OSX (already supported everywhere else)
Content restrictions on specific byte sequences in uploads
Added HTLM5 player support for movie files, and audio files if the browser supports it.
Keeps jars from being in use allowing for easier updates
CrushTask can generate share links on demand.
High Availability added for enterprise licenses (session replication, ServerBeat VIP, and DMZ mode)
HTTP session replication for enterprise users across multiple servers.
ZIP64 can be used on demand
DMZ keystore info only needs to be on internal server now
DMZ changed to use JGroups libraries
DMZ preference changes replicates to all internal servers
SQL mode handles all VFS properties now
Find task no longer generates job entry if its the first task item, and fails for no times found
Supports multiple bind IPs for tunnels to utilize multiple internet connections for a single tunnel distributing load.
Tunnel speed and efficiency improvements
CrushTunnel can now use a static number of channels without expanding or collapsing.
CrushFTPDrive can be instantiated in a headless Linux server
Failing logins can trigger an error event
Faster server update system
Improved file listing speed
Added Browse... button to many areas of the Virtual File System (VFS) and Tasks to help in entering URLs
Added more customizations for Manage Share in WebInterface.
Added customizations to only allow cut/copy of files, not folders.
Search results now shows the parent path info for the item.
Added customization to hide/show path column in tree view
Search panel can have defaults configured
Added stat support for MFMT
Added support for @ sign in usernames in URL format
Added additional FTP server compatibility (windows servers faking Unix)
DMZ scenario passes along real client issue to internal server
Improved popup dialogs on initial install of CrushFTPDrive
Supports additional variables in CrushTask
CrushTask Find can now ignore folders.
CrushTask can now do MD5 hashes and random id generators.
CrushTask can start and stop a tunnel.
CrushTask Wait can handle workflow, approvals and conditionals.
CrushTask Find/AS2 can have a max item count to process.
CrushTask Copy is more efficient when copying many files
CrushTask HTTP calls can be grouped now
CrushLDAPGroup can validate a token against a token server
CrushLDAPGroup can replace some variables in the URL
CrushSync uses built in sys tray on windows now
CrushSync includes upload, and delete feature
CrushSync can replace invalid characters before synching. (OSX synching to windows server)
CrushSync can handle larger slow running file listings
Calculation of transfer statistics change to username instead of ip
Simplified plugin loading
Added import method for vsftpd
selfRegistration user inherits from parent user now
Updated windows wrapper configuration to use new jar loading system
Expiring VFS can execute a task for cleanup
Limited admin can access email templates in User Manager
Allow for extra server customizations with a server_messages.xml file.
Can ignore web items when generating a new shared temp account
Custom share subject line can include info from body
XMD5 FTP command
Merges linked VFS across inherited users
Kicking a HTTP session forces them to login again
Can act as a learning proxy
Simplified syslog configuration
DMZ service can be installed from command line
Added SHA512 hashing for passwords
Changes to a user, or inherited user updates logged in users
Added CC and BCC on email templates
Supports multiple checkbox results in custom forms
Supports NLST as LIST for bad clients
Banned IP HTTP user gets more informative message.
Plugins can access the HTTP headers used from client
Supports alternative names for uploaded files in iOS safari
Supports ignoring expired client certificate.
Allow direct linking to a file with login to force redirect, or serve the file.
Max login time will affect HTTP sessions too now.
Added support for RENAME with overwrite for FTP.
CrushSync interface can be localized
Added date time validation in custom forms
User Manager batch update can be applied only to selected users
Filter in WebInterface can be filtered negatively with a ! symbol.
Search can only search keywords
Added DND upload support for IE10 since it started supporting it.
Filter can do a file search instead of current dir filter
View selector can be hidden
Upload window can be hidden after upload
Fixes:
CrushFTPDrive localization bug
S3 protocol fixes for bad bucket names
CrushSync disconnect bug
Java applet downloader fix for bad filenames
Java applet library fix for applet and new java versions
Chunked/unchunked stream switching
Default ftps port bug
Better error message on sftp client connection failures
Compatibility for CrushFTPDrive and some MS products
Missing parent folder on advanced downloads
Bug in UTF8 characters and advanced download
Long timeout for FTP listings that take a long time to respond
Bad characters in advanced upload mode
SFTP client connections not getting a dir listing
UTF8 encoding for SFTP client connections
UNC path fixes for CrushTask
moving file across different protocols in CrushTask
CrushTask SQL variables.
Memory leak on CrushTask SQL
CrushTask PGP decrypt fixes for nameless files
CrushTask SFTP private keys authentication.
CrushLDAPGroup limiting to specific port
MagicDirectory random mode and days/hours variable replacement
CrushSync sync issues on windows
CrushSync password change exiting the app
CrushSync download path fix
CrushSync library bug with new java version
Dimmed empty folder issue.
Email template ignored for User Manager send password
CrushSync tracks copy/paste in WebInterface
Memory leak fixes in SQL mode
DMZ socket utilization
SyncDB creation
Search not showing results for items that can't be downloaded
Multiple VFS linking issue
Upload forms report readability
Reverse proxy fixes for spaces in path
Plugin template inheritance issue with customizations
SSL keystore loaded with wrong password
Testing certificate can report failures
Start / stop deamon buttons on OSX
ProFTPD import bug
ServerBeat VIP reliability issues
MD5 calculations on transfers not logged properly
Publish/share feature in DMZ mode
WebInterface search for exact name
Expiration fixes for User Manager fields
FTP ASCII mode speed
Log rolling bug when prefs.xml file edited directly
Windows WebDAV client fix
Quota alerts had old info
Configuring expiration date orphaned share admin user
Monthly report schedules for days 1-9
Max packet length for SFTP
DMZ login delay when DMZ was idle for a period
Active mode FTP source port uses port -1 unless overridden
OPTIONS command missing some headers
Searching sub folders and handling duplicate search result names
Expiration date being lost form plugins
Viewing preview of filenames containing a plus sign in their name
SSHFS compatibility changes for CrushFTP SFTP
Caching issue with custom.js
DMZ restart not reconnecting issue
Password encryption with certain special characters
Events panel display issue
Custom upload form in WebInterface when uploading.
Reports panel in admin missing some parameters.
Java detection issues in WebInterface for loading the applet.
QuickShare auto email not working
Duplicating user in User Manager
Auto start upload not working when overwrite file occurs
Scrolling jump issues in WebInterface when expanding folders
Empty list issues with different config parameters not allowing empty to be saved
Reverse proxy settings not saving
Preview config in prefs not saving size info correctly.

New in CrushFTP 6.3.0 (Apr 4, 2013)

New:
CrushFTPDrive - enterprise only feature allowing direct high speed file access in the OS to CrushFTP as a network drive.
Added multiple VFS configurations per user. Single user can have many VFS's configured now.
Added VFS expiration option.
Added support for multiple VFS items acting as one in a merged scenario. Upload once, write multiple.
Added ability to log to SQL server as well as to a file.
User Manager individual item panels can be made sticky to always display even if not configured.
Added support for folder icon previews to see preview of images inside of it.
Custom forms can handle cascading to show specific fields depending on drop down selections.
Added email templates for user manager so you can quickly choose a form email for new accounts.
Added custom themes in the User Manager for the WebInterface.
Improved logging data from client protocols.
DMZ server mode performance improvements
DMZ server mode reliability improvements
Dynamic tunnel creation and start/stop and demand
Improved Jobs tab log handling to be much faster.
CrushSync can change admin user/pass info from systray.
Supports variables in Event paths configuration
Improved logging to log similar chunks together.
Added MD4 hashing support on passwords.
Added support for changing passwords with SFTP.
Added support for MD5Crypt passwords.
Fixed content-length bug preventing Chrome from some video playback.
Added start/stop buttons for service/daemon on GUI.
Tracks new empty folders for syncs.
Changes to a user take effect immediately to the logged in user.
Added support for third party restart script after an update is applied.
Fix for TLS 1.1 and 1.2 protocol being enabled.
Home folder automatic creation supports variables now.
Added support for log viewer to open other log files and monitor in realtime.
Added support for miniURLs in DMZ server mode
When an account expires, custom actions can be taken to delete the account, delete the VFS, send emails, etc.
Use default keystore if specified keystore can't be loaded.
Added support for linked VFS's from roles on LDAP Auth only logins.
Added support for groups and inheritance to pass on their expiration information to individual users.
Bug Fixes:
Fixed UI configurations on SFTP outgoing connections.
Path fixes for # signs and other URL unsafe characters.
Fixed client date parsing for some FTP servers
Fix for resume with advanced download/upload
S3 listing fixes for dates, and with failed prior transfers
Fixed bug in CrushTask emails
Fixed bug in PGP key loading, and allow for loading form remote locations.
Fixed SSH private/public keys for outgoing client connections.
Fixed UNC path issue for CrushTask
Fixed HTML emails to have proper tags.
SMTP emails used 'mixed' multipart to support text and attachments.
Fixed SCP upload of zipstream data.
Fixed bug in preview thumbnail generation with empty folders.
Fixed bug where Manage Shares was missing items.
Fixed bug with events and custom form 'label' values.
Fixed bug for alternate duration information from pcastaction on OS X 10.7
Fixed bug with multi channel SFTP connections and idle timeouts for entire socket
Fixed magicdir email getting lost for events.
Fix for WebDAV 'LOCK' request with no XML body
Fix for tunnels connections missing HTTP cookies.
Fix for AS2 message MDN filenames.
Fix for email event not updating variables.
Fix for AS2 loosing header info for events
Fixed memory leak with user's being loaded from SQL table.
Fixed UI on how passwords are erased and re-encrypted.
Fixed UI bug with filtering in logging panel.
Fixed WebInterface UI tree expansion of dirs with a name starting with a dot.
Fixed User Manager UI bug with renaming VFS items.
Fixed estimated time remaining to calculate in hours and minutes for large transfers.
Fixed UI bug in User Manager for filtering customizations.
Fixed WebInterface download for iOS to try and open the item.
Fixed UI issues with Opera/IE10.
Fixed bug with the Sharing email body text.
Added additional localization variable items for people writing custom translations.

New in CrushFTP 6.2.0 (Feb 11, 2013)

New:
Added support to update user manager users in batch mode.
CrushSync redesigned with web based install, management, and monitoring
CrushSync can now start synchronizing while a file is still being updated.
CrushSync uses a more straight forward file synchronization mode using less DB interaction.
CrushSync can be scheduled to run at specific times only.
Added support for CUT/COPY/PASTE working with the VFS and not just local files.
Session information is preserved through server restarts.
Job history information is preserved through server restarts.
Added support for looking up user emails from a group. {groupname}@G.{UserConnectionGroup}
Added support for multiple reverse proxy servers.
Tunnel can handle much faster throughput speeds over 1Gbit.
CrushTask - WriteFile - Added find/replace for altering an existing file.
CrushTask - SQL - Added support to do queries to SQL, inserting rows, selecting rows, using information about files.
CrushTask - FileParser - New feature to read CSV (delimited) or fixed text files, parsing results into items that can be used for other actions like SQL inserts.
CrushTask - Find - Support finding items that have been deleted by comparing to last cache.
Added TempAccounts admin controls.
Linked VFS support is much more advanced to handle complex scenarios.
Added re-captcha support to WebInterface login page. (Requires google re-captcha account to use it.)
Added support for viewing EXIF info and changing EXIF values on images.
Automatic user refresh on logged in users when a save is done in the user manager. No need to logout.
New log viewer in admin lets you view the entire log, search, filter, color tags, realtime scrolling, and more.
Added ability to have a list of results for custom form fields to assist users in entering correct data.
Added ability to have uploads auto start, and restrict to specific file extensions
Added QuickShare feature for after an upload is completed.
Enhanced download basket giving more controls to review the items in the basket.
Added HTML editor for share email body.
CrushLDAPGroup allows specifying roles and template users to use for the role
VFS handles SSH key authentication when connecting outbound to remote servers
VFS handles client cert auth for FTPES authentication when connecting outbound to remote servers
OS X Advanced mode upload has a better file chooser.
VFS is more robust at handling bad FTP servers on outbound connections.
VFS has additional logging capabilities for tracking actions.
DMZ mode now uses socket pooling for better efficiency
MagicDirectory supports creating random usernames as well as passwords.
MagicDirectory can now handle a 'days' notation for expiration.
CrushTask - PopImap - support folder structures
CrushTask - Copy - Added copying a file with a unique name.
CrushTask - Copy - Supports ASCII mode when doing a FTP copy.
CrushTask - Copy - Added support for very limited 'simple' mode for bad FTP servers.
CrushTask - Added unique guid value as a variable.
Self registration now honors password rules.
AS2 MDN responses are now written to a file.
Removes 'Shares' folder when last share is removed from a user.
Added variable for events tracking success and failure for transfers.
Added support to encrypt and decrypt items from the WebInterface.
Automatically fixes emails to be HTML mode if the SMTP server is set to HTML and email was plain text.
Update mechanism is faster.
Added multithreaded listing for large folders and FTP protocol.
Generates exif data for previews using exiftool.
Compression fixes for large zip files (greater than 4GB).
HTTP uploads failures errors are displayed in browser now.
Faster PGP encryption and decryption.
Less verbose HTTP headers in logging.
Added ability to log individual user session logs to disk.
Discards CRLF HTTP injection.
Added FileZilla user import process.
Added ability for FolderMonitor to execute a scheduled job if it finds an old file.
Preserves OS X Info.plist file during CrushFTP updates.
Improved AS2 compatibility with more servers.
Added support to download multiple preview thumbnails as a zip file.
Added support for reading giant ACII mode files with only one line.
Added unsafe filename characters for uploads.
Enhanced objects plugins can work with.
Added speeds to UploadDownloadSummary report.
User hammering Alert emails have more data available now.
Automatically starts using new SSL cert if cert it changed.
Added password rules to login.html file and resetting the password with the randomly generated one.
Added support for windows ACL permission lookups on files for some plugins.
Added preference for where preview thumbnails are stored.
Added support to limit the TLS version that is used to avoid BEAST attack. (Or just use Java 7)
Increased PASV port timeout for slow clients.
Allows browser to save login credentials on login page.
Improved advanced upload mode in WebInterface.
Added media preview for WebInterface slideshows.
Added control to rotate previews in browser.
Added support to show custom HTML file instead of directory listings.
Improved log viewer in User Info panel of WebInterface.
Bug Fixes:
Fixed reverse HTTPS tunnels not working
Fixed deleting and creating internal shares.
Fixed bug in detecting insufficient privs on Windows for installing service.
Fixed UTF8 mode for SMTP email subjects.
Fixed bad SITE commands not getting error response.
Fixed bug loosing inheritance when saving with SQL DB.
Fixed bug not setting OS folder privs when expanding a zip.
Fixed bug loosing user_email variable from plugin users.
Fixed bug with command lien generation of users.
Fixed bug sending emails through exchange servers.
Fixed bad URLs in the VFS coming from older CrushFTP versions.
Fixed recursive event processing
Updated SFTP library for bug fixes and security fixes.
Fixed bug loosing keywords and thumbnails on rename.
Fixed LimitedAdmin user manager error messages.
Fixed bugs in upload form values not being accessible.
Fixed bug logging some plain text passwords in CrushSync mode.
Fixed DMZ socket timeout issues.
Fixed rename when only changing filename case.
Fixed bugs when using a DB for the search index.
Fixed bug in looking up the local LAN IP on some systems.
Fixed bugs with selfRegistration process
Fixed bugs for ExportUsers report stopping on a bad username.
Fixed bug in IP banning causing all IPs to be banned.
Fixed bug in creating home folders.
Fixed quota alerts for when quota is exceeded.
Fixed alerts missing user_info for variables in email.
Fixed duplicate entries in FTP STAT command.
Fixed folder path matching in events.
Fixed DMZ and CrushSync mode.
HomeDirectory has a fix for being used as an event.
CrushTask - Find - bug fixes.
CrushTask - Unzip - fix for unzipping in parent folder.
CrushTask - Jump - fix for not passing error information
CrushTask - Preview - Ignore disabled preview configs
CrushTask - PGP - Fixed decryption bug.
CrushTask - Find - Fixed bug when iterating through directories
CrushTask - Execute - Avoid deadlock on process that doesn't end.
Fixed admin theme switcher not functioning.
Fixed bugs in WebInterface slideshows.
Fixed bugs with IE10 compatibility.
Fixed many bugs with User Info panel on WebInterface.
Fixed data validation on some User Manager fields.

New in CrushFTP 6.1.0 (Jul 27, 2012)

New:
WebInterface supports HTML5 drag and drop for file uploads. Upload interface is more streamlined now too.
Download basket has been enhanced and supports icon previews, and other actions.
VFS is much faster, more capable, SQL integration faster too
Added self registration with approval process
Added S3 protocol support
Compatible with OSX 10.8 Mountain Lion
Added support for DMZ server and managing multiple CrushFTP instances from one for Enterprise licenses
Added support for creating a ZIP in the WebInterface
File based encryption is PGP based now instead of proprietary format
Supports larger zip files sizes (ZIP64)
Added "changing all" flag for CrushTask Find task
Added newer/older condition for Find task in CrushTask
Added FindCache task type to CrushTask to prevent finding items again
Added retry support for Copy task in CrushTask
Support resuming file transfers for Copy task in CrushTask
Added streaming support for PGP task in CrushTask (not only local files)
Added streaming support for Zip/Unzip task in CrushTask (not only local files)
New protocol engine in CrushTask, faster, more lightweight.
Java applet loading warns user if Java is disabled, or not installed.
Improved update handling with automatic CrushFTP service restart
Previews handle bad files quickly now
Better thread management
Added automatic inheritance for users added to a group
Previews icons can be downloaded with right click now
Added linked VFS items to UserFolderPermissions report
Limited Admin can configure forms, and tunnels on users
Support for bad FTP servers when using CrushFTP as a proxy (OS/400)
Supports ASCII/BINARY mode for FTP proxy operations
ExportUserPass report can access more properties from a user
Supports merging / colliding VFSs from multiple users
Added ERROR event type to user manager
Creates home folders when improving users
Changed library for proxy mode doing SFTP connections.
Supports setting the email on a user when making them from the command line
Added feedback when server is decompressing a file slowly on zipped uploads
Improved internal log messages
Added max timeouts for HA proxy connections
Fixes:
Fixes for sshfs client interacting with CrushFTP
Fixed events not being triggered
Fixed registration issues with older licenses
Fixed many issues with URL encoding of special characters in the admin UI
Fixed memory leak related to SFTP
Fixed disk space calculation for alerts
Fixed AS2 handling of MDN responses
Fixes downloading a file that is currently being uploaded into
Fixes for FTPS client SSL auth
Fixed importing older CrushFTP4 users to CrushFTP6
Fixed bug with duplicate event execution
Fixes for limited admin management
Fix for SMTP Subject not handling UTF8 chars
Fixed for folder monitor when finding empty folders
Fix for rename event
Fixed emailto: links for some versions of Outlook
Fixed bug in downloading ASCII files over FTP
Fixed bug with bad URL in sharing a copy of a folder
Fix for reverse proxy mode and unusual forwarded-for header
Fixes for tunnel closure
Fixes for in stream PGP encryption and decryption
Fixes for zip filenames in CrushTask
Fixed execute exit code handling in CrushTask
Fixed Wait task in CrushTask
Fixed many UI issues in User Manager

New in CrushFTP 6.0.1 (Apr 11, 2012)

New in CrushFTP 5.8.0 (Nov 23, 2011)

New:
better thread usage, handles higher loads now
added Jump support for CrushTask (Enterprise customers only)
added MFMT, MLSD, MLST command support to FTP
added per user file at rest encryption capabilities
improved HTTP interface response time
improved speed handling for uploads and download with Java applet (advanced upload/download) in WebInterface
supports delta based uploading and downloading when resuming a transfer with the Java applet
CrushTunnel can now do reverse mode
can now direct link to files even through a login request
validates emails in Share WebInterface
supports multiple simultaneous downloads and uploads on a single SFTP connections
WebInterface can select all files even in pagination mode now
shows growl notification in WebInterface when download starts
supports read_only fields in WebInterface custom forms, and hidden fields
added support for asynchronous events that might run for a long time
less WebInterface caching
WebInterface can now display the last error that occurred on a file transfer
can now control the number of recent sessions kept in the GUI
can block URL unsafe characters
better URL decoding capabilities
importing users can handle additional fields in tab delimited format
added support for max connections per protocol
added support for case insensitive usernames
added support for complex password restrictions
added support for changing the password front he login page when its expired
changed to Derby for internal DB engine to prevent corruption caused from HSQL (automatically converts)
internal code cleanup
Fixed:
CrushTunnel bandwidth acceleration had a memory leak that was fixed
other misc CrushTunnel fixes
login count is less exaggerated with web clients now
fixed zip archive structure being too deep for zipped web downloads
WebDav fix for some clients looping forever
fixed bug with IPv6 support
FTP proxy fixes
fix for Adobe Contribute WebDAV issue
fixed changing password when using SQL back end
fix for very small uploads and downloads int he WebInterface
fix date customizations for shares not he WebInterface
work around for JVM bug on some Windows versions
fixed file size tracking for zipping and reports
fixed upload bug with HTTP leaving files corrupt if the size was a specific size
fix for uploads not overwriting a file
fix for events and WebDAV, tracking multiple sessions as one
fixed daemon install for some OS X systems
fixed new files report when a path contained a space
fixed delete order for CrushTask deletes
fixes for variable replacement in CrushTask
bug fix for tree view in WebInterface
fixed bugs with resuming transfers in WebInterface
fixed bug with ReverseProxy and WebInterface

New in CrushFTP 5.7.0 (May 24, 2011)

New:
improved user manager load times
added new 'welcome' event to trigger different actions
increased size of thumbnails in Sharing emails
bundled ThumbsUp to handle OS X image previews (http://www.devon-technologies.com/)
faster WebInterface performance
logs detailed changed being made to server prefs, or users to CrushFTP.log
inheritance for WebInterface customizations now merges across all layers
added cleanup of expired accounts in the user manager
added support for controlling who emails are sent To: and From: for Sharing
added ability to grant limited administration to just the user manager, and only the users in a group
preserves modified times on uploaded files using advanced mode
added the ability to do exclusion pattern matching for folder monitor
added support to encrypt VFS URLs in the XML files
additional modes for AS2 authentication
added ability to redirect user at login to another web page
alerts can now catch bad email addresses
added list of files a user accessed to the Welcome form report
reports no longer email out empty reports
added support for importing BulletProof FTP users
added support for MySQL and statistics DB
added additional APIs for WebInterface for external access
added default slideshow permissions when sharing images
removed old WebInterface
cleanup of unused libraries, smaller application size
Bug Fixes:
fixed bug with export user pass report handling groups
fixed bug with case sensitivity and using a DB as the back end for users
fixed bug with some UTF8 chars on the WebInterface
fixed bug with symlinks that are being downloaded
fixed bug with searching in the WebInterface
fixed bug with SSL and SMTP
performance tweaks for SFTP proxy scenario
fixed bug with tracking upload forms with Advanced upload
fixed bug with POSIX permissions on OS X
fixed bug with mass updates in user manager and VFS
fixed NLST responses
fixed bug with getting disk usage in Linux
fixed bug with SQL mode and non local VFS
fixed bug where password changes were lost in the user manager
fixed memory leak in specific scenarios
fixed bug with SFTP download packet order sequences
fixed bug with Groups for various reports
fixed bug with creating too long of paths in Windows
fixed bug with cached VFS items being difficult to delete

New in CrushFTP 5.6.0 (Jan 21, 2011)

New in CrushFTP 5.5.0 (Oct 26, 2010)

Major Enhancements for Everyone:
New SSH Engine:
faster, robust, and more compatible with SFTP/SCP clients in general.
New HTTP Engine:
new engine is faster at handling HTTP requests, and handles reverse proxy scenarios correctly.
New HTML WebInterface:
All based on CSS, Javascript, and HTML. Includes integrated invisible Java applet when needed.
No more Flash interface! Same interface works on any modern browser now.
Supports native browser drag and drop upload for modern browsers.
Uploading and downloading in the WebInterface can now use zipstreaming for faster performance.
Support for IPv6
Major Enhancements for Enterprise Customers:
High speed file transfers using accelerated HTTP tunnels.
regardless of distance, or packet loss, you can now get full speed on file transfers around the world.
20Mbit connections from Australia to the US.
100Mbit connections from Europe to the US.
So whatever your bandwidth is from your ISP, you can utilize it all if the other end also has the bandwidth.
Task Scheduler:
You can run scheduled CrushTask instances to do various things when needed.
Other general enhancements:
Added option to require both public key and password authentication for SFTP.
Added support for @AutoDomain where the user's domain on their login determines where CrushFTP finds the user account.
Added event for when a user connects.
Added event for deleting files.
Added button to send email notices of new accounts.
Increased speed of remote admin handling.
Added more compatibility for AS2 and AS3 file transfers including ASYNC MDN replies.
Stores the last 200 hours of prefs.xml files for longer history to recover from.
Added ability to easily restore an older prefs.xml file from the main window.
Added STOU FTP command. (Store Unique)
Added ability to restrict server bandwidth, but exclude some IPs
Added user manager customizations for the WebInterface to insert your own CSS or Javascript.
Added SQL "modified" table to we can track when data has been altered externally. (Better caching support for SQL.)
Added safeguards to prevent accidental deletion of config files.
Added protection against reading a file that is only partially written.
Directory listings are now sorted by default.
Increased the speed of ASCII mode handling.
Added ability to get URL parts in an email event
Added hammering alert for user accounts connecting too frequently.
Added some additional logging customizations.
Added support for the same CrushFTP folder to do remote admin for multiple places.
Added control for proxy mode to do active or passive mode on FTP connections.
Added ability to set the home path of a user who logs in with SFTP.
Added configuration option for maximum threads the server can do.
Added support for SITE restart command.
Added support for ASCII mode when using proxy.
Cleans up older stats out of the statistics DB.
Added upload and download counts to the GUI user info window.
Added support for SFTP proxy mode to keyboard interactive servers.
Improved efficiency of Chunked encoding in HTTP handlers.
Added control over the index of the ethernet adapter in the ServerBeat protocol (High Availability.)
Added helpful message about AES256 encryption and how to enable it.
Increased speed of SFTP proxy mode.
Added preliminary support for XML API to do server administration.
Added additional debug logging throughout the server.
Events now run multithreaded.
User manager can now do batch copying, linking, and deleting of events to users in that group.
Created stronger warning message on what monitor folders does.
Added create local folder button into user manager.
Added display item to see "filetree" listings statuses on really large listings
User manager automatically displays hidden items now when using the quick jump feature.
Now uses better privilege escalation for installing a daemon, or using ports below 1024. Less annoying popup window.
Added ability to create user home directories.
Bug Fixes:
Better socket management when CrushFTP is acting as a proxy
Fixed tunnel configuration in remote admin mode
Binds to the same IP that the incoming FTP connection used for data channels
Fixed caching bug on local files
GUI tweaks for better sizing and layout
Fixed bugs with synching plugins to remote admin session
Fixed new folder bug with Windows FTP client, and Windows WebDAV.
Fixed GUI issues in User Manager when using the quick find for a particular config item.
Improved searching algorithm to be more reliable and faster.
Fixed formatting on expiration date in user accounts.
Fixed ServerBeat (high availability) function for Linux machines.
Fixed bug in creating command line users.
Fixed bug in "Forgot my password" link not working.
Fixed bugs in proxy mode when using SFTP.
Fixed bugs in service install when port configuration is not correct.
Fixed STAT command in FTP.
Fixed bug with monitor folder settings not being cancelled properly.
Fixed bug with multiple PASV commands breaking the FTP session.
Fixed bug with installing daemon when using SQL mode.
Fixed error conditions when using a proxy in RFC mode.
Fixed bug with duplicating an event not making that vent unique.
Fixed bug with plugins using public key authentication.
Fixed beforeLogin plugin hook.
Fixed bug where the user manager reset permissions when renaming.
Fixed bug with some characters on remote admin passwords.
Fixed IP banning for HTTP sessions.
Fixed bug with jails proxy connections and merging multiple proxy FTP connections.
Fixed user manager concurrency issues.
Fixed inheritance in user manager.
Fixed browser's BASIC authentication popup.
Fix for events thread dieting and no events being triggered.
Fixed bug that showed the root SFTP VFS item's path.
Fixed reports to handle the display of larger file sizes.
Fixed out of memory issues when using inline plugins for the user manager's events.

New in CrushFTP 5.1.1 (Jun 23, 2010)

New in CrushFTP 5.1.0 (May 10, 2010)

New:
uses fewer threads for all sessions
client certificate authentication is now supported for FTPS as well as HTTPS
improves WebInterface to display logos, welcome messages and honor some color customizations
added control to block access to specific directories or files matching a pattern
improved server prefs GUI to be less confusing on what "Server Groups" do
added default for WebInterface to hide the upload method choice
added defaults for WebInterface sharing, and allowing uploads
supports recursive MKDIR command in FTP now
added customization to force slideshow only mode
added browse and test buttons for DB setup on the User Config tab
windows service will now work in 64bit mode instead of 32bit mode
faster exiting of failed remote admin sessions
added support for dumb proxy mode
SQL compatibility improvements
removes temp files when using remote admin mode from a web browser
added flag for disabling an account in the user manager
added additional plugin hooks to monitor and control CrushFTP
added flag to make events be able to be run immediately (_NO_DELAY at the end of the event name)
added support for SFTP public key files being stored in the user manager field
allows for multiple copies of CrushFTP to technically be run from the same machine
now propagates error messages back to WebInterface or SFTP client if an upload fails.
improved servu import to capture notes field
Fixes:
WebInterface compatibility fixes
bug fixes for webdav clients
bug fix for editing inline plugin info in user manager
fixed who downloaded report to only show downloaded files
bug fixes for the WebInterface sharing feature
bug fix for downloading PDF files with Adobe Reader browser plugin
bug fix for event handling processing a file multiple times
fixed bug when writing files in encrypted mode
fixed bug for making previews of images when not on the C drive
fixed bug with chmod in SFTP
fixed bugs with CCC command in FTPS mode
fixed bug with IIS FTP proxying
fixed compatibility with Adobe Contribute and WebDav
fixed bug with chunked HTTP tunneling
fixed potential memory leak when in proxy mode
fixed bug with importing CrushFTP 4 user databases to CrushFTP 5
fixed bugs with SFTP proxy handling of files and directories

New in CrushFTP 5.0.6 (Feb 26, 2010)

New:
will act as CrushFTP 5 is CrushFTP detects you meant to start CrushFTP5 but forgot the flag (linux)
uses new events system for more reliable event execution
made it easier for generating Previews
can now set the title on the login page
added additional support for dump proxy mode in CrushFTP when dealing with bad FTP servers
folder monitor can now call third party plugins (CrushTask)
added support for allowing uploading to temp accounts
added additional hooks for plugins
changed dir filtering to use regex (partially)
added flag to be able to start Crush with all ports stopped
WebDAV is now supported on Windows Vista / 7
WebDAV now passes most of the 'litmus' tests.
some plugins can now be created inline in the UserManager instead of just globally in the server prefs
creates groups in CrushFTP 5 when importing CrushFTP 4 users
added variable %user_dir% that does not include the root directory of a user
added ability to set a alternate source port for active mode connections
Fixes:
fixed bug with ServerBeat not being disabled properly
fixed bug with inheriting the user/group/privs in OS X and Linux when writing a new file.
fixed bug with scp handling multiple uploads per connection
fixed bugs with generating Previews on Windows
fixed bugs with Flash and UTF8 characters (another work around)
fixed bug with CrushUploader uploading files
fixed bug with backing up prefs.xml, and restoring a backup file if a main one fails
fixed bugs with Custom VFS's by third parties
fixed bug where modified dates were lost when you copied and pasted files in the WebInterface
fixed bugs with editing temp accounts when using remote admin mode
fixed bug with lowres downloads of images
fixed bug with UTF8 characters in emails
fixed bug with a memory leak
fixed bug where files coulee be left in use
fixed admin user creation to write file in the CrushFTP 5 default location
fixed bug where uploads seemed to be failing even though they were not
fixed bug with the IP in response to PASV
fixed bug with timeouts for hammer banning
fixed bug with the folder monitor GUI
fixed bug with CCC synchronization
fixed bug with blocking WebDAV connections
fixed bug with empty directory listings
fixed bug with logging in and out using different user accounts within the same browser session
fixed bug with linked events
fixed bug with miniURLs and the default flash/html mode

New in CrushFTP 5.0.5 (Jan 21, 2010)

New:
Advanced uploader in Flash interface is now Proxy and firewall friendly
tunnels can now be run in stand alone mode by keeping a copy of the tunnel.jnlp file
added support for progress bars when doing remote admin force updates
added support for HTTP chunked encoding
added various additional SSL certificate choices when generating a new key
HTML interface now uses the "Preview" for its previews instead of CrushImagePreview.
added missing GUI items to User Manager that existed in CrushFTP4
added web customizations for all items in the Share/Publish window of the Flash interface
added web customization for defaulting to advanced file uploader
improved GUI layout for SQL/XML selection in user Config tab
added compatibility flag that can control if all SFTP connections are closed when a channel is closed
added support for chmod using SFTP
added better sorting to proxy rules
changed default to make empty SFTP files
added protocol used into logging
added FTP proxy information into user session log
added flag to disable proxy jailing
added log rolling date customization
added support for MD5 operations
added support to link or unlink a VFS to everyone in a group
added support for dumb proxy mode
no longer updates expire date if it hasn't been reached yet
added limits to how many stats are tracked
added support for return characters in the default Share email body
Fixes:
implemented fix for Java vulnerability related to SSL sockets and cipher renegotiation (CVE-2009-3555
fixed bugs with cleaning up SFTP connections after they are closed
fixed bug with browsing for files in Advanced mode of Flash uploader interface
fixed bug with UTF8 characters in WebInterface
fixed bug with uploading files that are not eh root of the HD
fixed inheritance bugs in the new User Manager
fixed bugs with SQL based users in the new User Manager
fixed bug with importing CrushFTP 4 users
bug fixes to FTP proxy mode on handling remote servers
fixed bug with too many open files
fixed bug with using MS SQL for SQL backend
fixed bug where serverbeat panel was hidden
various fixes to Preview worker so that it processes previews better
fixed bug with upgrading prefs from version 4
fixed bug with finding the Linux local IP
fixed how zipstream handles writing files
fixed issue with remote admin where it could lock up
fixed bug where email password was disabled in Crush5
fixed bugs with upload forms in the Flash interface

New in CrushFTP 5.0.4 (Nov 18, 2009)

New in CrushFTP 5.0.3 (Oct 30, 2009)

User Manager can now do live filtering on settings if you type in a keyword to find that setting
added support for VFS linking (multiple VFS's consolidated)
added support for port forwarding via SSH that can be locked down per user, per destination
Users Manager can now do batch updates to everyone in the list
custom upload forms are now being tracked in the DataBase
added expire password option
warning when logging in if your password is expired and must be changed
now supports MD5 hashed passwords
created workaround that may help with some virus scanners blocking remote admin
additional compatibility changes for FTP proxy mode to non standard FTP servers
remote admin mode will now retry for 30 seconds to get a connection before giving up
events will now process 0 byte files
added logging of what is being unzipped in a zipstream upload
hidden 'dot' files are no longer hidden in WebDav by default
improved port in use error messages
added command line SITE SEARCH command
added configuration option for forcing uploads in Binary mode, or Downloads
added busy cursor when WebInterface is loading the directory
support for displaying mini FLV files as a preview
added warning if file is too big for normal mode uploads
hides items in the WebInterface that are not available
Fixes:
fixed bug with stats DataBase getting out of sync
fixed bug with SCP and the connection getting closed
fixed bug with the SQL commands when not using XML users
fixed bug with picking users with the Reports Quick Pick
fixed bug with SQL inheritance settings
fixed some UTF8 bugs in the WebInterface
fixed bug with race condition on very fast uploads, or downloads, not getting their socket
fixed bug with Windows service not installing correctly
fixed bug with plugins getting loaded alphabetically
fixed bug with iCal and other WebDAV clients posting uploads to CrushFTP
fixed bug with the format of OpenSSH key files
fixed bug with events being called immediately having the wrong item
fixed bug where files could be uploaded that were up to twice the max size allowed
will currently accept CrushFTP 4 registration codes until 12/01/09
fixed bugs with displaying the custom upload forms in the WebInterface
videos will be coming soon

New in CrushFTP 5.0.1 (Aug 20, 2009)

CrushFTP 5 is a paid upgrade for everyone except enterprise customers.
Protocols:
WebInterface(HTML/Flash/Java), FTP, FTPS, SFTP, SCP, WebDAV(SSL), HTTP(SSL), AS2
Features:
SCP support for SSH transfers.
Support for AS2 transfers.
CrushTunnel is part of CrushFTP now. You can define tunnels, and assign them to users for access. A tunnel is sort of like a mini VPN, but only for a single port, and all running over HTTP. You can allow specific pin holes into your network for certain services. In that sense its more secure than a VPN that puts a users totally inside your network.
Temp Accounts are only partially implemented. Similar to magic directory in that a folder structure defines and controls account access. They are all managed by CrushFTP and purged based on specific rules, as well as the user who generated the temp account can manage their own temp accounts.
User manager is more streamlined. I can now add new features to crush easier. The old user manager was difficult to add things to.
User manager will only prompt to save if a change was really made.
User manager allows for complex inheritance, live GUI reflection of the inheritance being done, and a simpler mode where you only see the settings that you have changed from the defaults. (90% of the time its the way you want it.)
New WebInterface has more advanced features, faster rendering, handles more items better, image previews on files is built in.
You can easily do publishing and sharing of photos on the WebInterface now.
User manager allows for window shading up the various section headers on a user.
Live filtering based on username, or based on users who inherit from the username.
Multiple group chaining for settings in the User Manager. CrushFTP4 could only do a single group, or individual settings. CrushFTP5 doesn't do individual settings, but it does multiple template style chaining.
Webinterface now has a temporary account manager. Anytime you publish a file and generate a new temp account, this is now tracked, and you can later go back and delete the temp accounts you created (if they have auto expired).
TempAccount manager is its own manager style window in the CrushFTP GUI.
WebInterface can be toggled back and forth between Crush5 and Crush4 now. This gives you a bit more of a safety net for experimentation.
There is a new download queue that allows for fast downloads, all managed by the Crush interface. Very slick.
Uploads with the new WebInterface are even faster now using zipstreaming.
When using preview on folders, zip files will have their contents listed when hovered over.
WebInterface now has a slideshow view to see photos in easy photo viewer modes.
Preview config in the server prefs will now help you auto configure different types of preview setups.
You can now just drop in a user folder from CrushFTP4, and when you open the User Manager, it should just work.

New in CrushFTP 4.9.8 (Aug 18, 2009)

CrushFTP 5 has been released! (Paid upgrade.) http://www.crushftp.com/5.html
Added new report "Expiring Accounts".
User Manager now selects user after duplicating.
Added delete event type to User Manager.
If reports are empty, they are no longer emailed.
Added support for SITE ZONE command.
Warning message about ports in use is more descriptive now.
Banning IPs can now be disabled.
Uses new HTML page for getting CrushFTP version information.
Can now upload 0 byte fixed with SFTP.
FTP proxying now handles PASV mode better.
Proxying FTP now works for UTF8 listings.
Added install daemon menu items for OS X.
Added default privs for LDAP home directories.
Debug logging now has timestamps.
Plugins can now provide public keys for use by SFTP logins.
Now uses default SSL providers for the JVM being used.
Kicking a HTTP session now kicks based on the cookie and not user and IP.
Responds with the reason for a FTP proxy failure to login.
Separated out components CrushFTP relied on to their own files for easier updating.
Remote admin from a web browser now requires a password to start.
Now allows for editing of remote admin URL during remote admin sessions.
Simplified conversions with CrushImagePreview plugin for non windows machines.
Rejects ebcidic encoding type.
SFTP doesn't disconnect the user if only a channel has been closed, and not the session.
Fixed bug with SFTP connections sometimes failing to initialize.
Fixed bug with secure cookies.
Fixed bug with events on disconnect.
Fixed bug with the OS X Finder, and Adobe Reader when downloading PDF files.
Fixed bug on searching for usernames in reports.
Fixed bug where files could be left in use after uploading.
Fixed issue with HTTPS to HTTP reverse proxy configuration (protocol changed URL).
Fixed timezone offsets when dealign with Daylight Savings time.
Fixed reports test button generating two emails.
Fixed bug where HTTP sessions could timeout after 30 minutes, even if still in use.
Fixed bug where ldap variables could not be referenced in emails.
Fixed bug in parsing MS FTP server listings.
Fixed upload forms search report to work with options on combo boxes.
Fixes bug with proxy servers sharing connections on the same TCP Socket.
Fixes bug with HTTP proxy so that a failed directory change doesn't hang the connection.
Fixed bug where hack usernames never time out.
Fixed bug in updating CrushFTP on Windows where the update.bat had invalid references.
Fixed bug on Windows where the CrushFTP.jar may be lost during the update process.
Fixed windows service install to not write extra log files.
Fixed bug with remote admin URLs not working if they were missing a slash.
Fixed bug with uppercase key names in CrushSQL plugin.

New in CrushFTP 4.9.7 (Jun 24, 2009)

New in CrushFTP 4.9.6 (May 22, 2009)

speed up SFTP connections
SFTP is now enabled by default on port 2222
added support for configuring a SSH Debug log file
supports renaming files in FTP across physical hard drives instead of only on the same drive
can now do inline unzipping of file contents during an upload (.zipstream)
new option to disable gzip encoding for WebInterface
SFTP can now delete an entire directory without going item by item
template user can now verify outgoing SFTP connections
handles over quota scenario better, stops transfer immediately.
allows password to be changed in a plugin
sort usernames alphabetically in Linux User Manager
better cleanup of temp folder when doing remote admin
fixed remote admin freeze when configuring scheduled reports
WebDAV connections now filter files based on the server settings
can now proxy FTP connections to DataExpress Nonstop (DXNS) servers.
server host key for SFTP can now be regenerated without restarting the server.
improved logging when importing Serv-u users
supports shorter login URL: http://server:port/u=user&p=pass&path=/
supports a magic filename called ":filetree" to get a recursive listing of files
now warns when recycle trach bin is invalid
reports can now reference the parameters used on the report via paramsObj
new options to allow uploaded items to be processed by multiple events
fix for Windows having corrupt plugins
fixed bug where log files did not roll
fix for FTP proxy connections not being released.
fix rapid requests of small files closing the connection too fast
fixed error caused by folder monitor monitoring a non-existant folder
fixed FTPS Implicit not starting data channels correctly
fixed user manager group selection bug where you couldn't cancel the selection
fixed variables that can be used in Alert emails
fixed bug where banned user was not immediately kicked
fixed bug with folders that had a double space in them with a FTP proxy
fixed double id numbers in the recent activity list
fixed sizing of GUI in preferences window
fixed GUI glitches in User Manager dealing with VFS inheriting and linked VFS's
fixed CSV exported reports missing return characters in remote admin mode
fixed OS X Finder 10.5 crashing when doing WebDAV
fixed permissions when linking multiple VFS's from users together
fixed bug with loading prefs.xml file after an outside editor changed it
fix for Active Directory style domainusernames
fixed download timeouts and upload timeouts being set to 6 hours
removed integration options for OS X

New in CrushFTP 4.9.5 (Mar 27, 2009)

New in CrushFTP 4.9.4 (Feb 19, 2009)

New in CrushFTP 4.9.3 (Dec 2, 2008)

New in CrushFTP 4.9.2 (Dec 1, 2008)

New in CrushFTP 4.9.1 (Nov 3, 2008)

New in CrushFTP 4.8 (Jun 6, 2008)

New in CrushFTP 4.7 (Apr 1, 2008)

New in CrushFTP 4.6 (Feb 9, 2008)

New in CrushFTP 4.5.1 (Jan 15, 2008)

New in CrushFTP 4.4 (Oct 19, 2007)

Added support for private/public keys for SFTP
Added real quota support (calculates the actual folder sizes)
Added additional WebDAV commands and compatibility options
Added quick filter option to search users, and log info for specific text
Added option to enable / disable directory caching (can speed up server performance in many situations greatly.)
Added support for expiring passwords after x days and allowing them to be changed
Added support for using ImageMagick with the CrushFTP CrushImagePreview plugin.
Added random password generation for MagicDirectory users
Added automatic email notification for MagicDirectory users
Added option to set the default for the crush uploader to resume uploads by default
Added option to set the default for the crush uploader to zip uploads by default
Added option to control CPU load on server with FTP commands
Added option to control CPU load on server with directory listings.
Added support for setting modification dates when using SFTP
Added the option to move deleted items to a recycle folder instead of actually really deleting them. Also does versioning of the file/folder.
Added option to set the alignment of the WebInterface logo
Added global web footer text option
Fixed bug with renaming items in the user manager
Fixed bug with CrushImagePreview plugin checking for invalid iamges
Fixed issue with response to searches corrupting browser pipelining requests
Fixed issue with hung user manager remote admin connections
Fixed bug where an IP could be listed multiple times in the ban list
Fixed potential DOS issue affecting some users
Fixed web remote admin mode issue with Windows
Fixed email error responses to be more meaningful
Fixed issues with some operating systems not working properly in the User Manager
Fixed bug with uploads to virtual directories
Fixed bug with uploads that had whitespace in the names
Fixed bug with custom forms on the WebInterface making browser scroll bars very long.
Fixed bug with canceling an upload in the WebInterface
Fixed bug with renaming directories and files being tracked excesively
Fixed bug with magicdirectory plugin and template users
Unzip plugin now handles external unzipping where zips have meta info from the Finder (ditto)
Fixed bug with log file being overwritten