Poweradmin v4.0.2 - Patch Release

Comprehensive Bug Fixes and Enhanced Stability

I’m excited to announce the release of Poweradmin v4.0.2, a significant patch release that addresses 16 critical issues across the entire platform. This release focuses on improving stability, validation, and user experience based on valuable feedback from our community.

🛠️ Major Bug Fixes by Category

🗃️ Database & Records Management

This release includes important database improvements that enhance data integrity and MySQL compatibility:

• Enhanced Record Handling: Fixed invalid database entries being included in queries (#758), ensuring cleaner and more reliable data retrieval

• MySQL Strict Mode Compatibility: Standardized boolean parameter binding to work seamlessly with MySQL strict mode configurations

• Database Migration Improvements: Added comprehensive migration scripts to fix password_reset_tokens default values across all database types

• PTR Record Handling: Resolved null ptrZoneId issues in RecordCommentSyncService for more reliable reverse DNS management (#760)

🔐 Authentication & Security

Security and authentication received focused attention in this release:

• Recovery Code Validation: Corrected input validation length for recovery codes, ensuring proper two-factor authentication flows (#784)

• Password Reset Tokens: Enhanced password reset token creation to include the ‘used’ field, preventing potential security issues

🌐 DNS & Validation

DNS functionality and validation logic saw significant improvements:

• IP Address Validation: Enhanced IP address validation logic for better accuracy (#794)

• SPF Record Support: Now properly supports multiple instances of SPF mechanisms, improving email security configurations

• LUA Validator Enhancement: Added support for record type prefixes in the LUA validator (#770)

• SRV Record Compliance: Corrected SRV record validation to match PowerDNS format requirements exactly (#755)

• Error Handling: Improved error handling throughout the validation pipeline for better user feedback (#764)

🖥️ User Interface

The user interface received several quality-of-life improvements:

• Enhanced Sorting: Enabled sorting by owner, ID, and disabled status for better record management (#781)

• Form Security: Disabled browser autofill for user creation forms to prevent security issues (#782)

• State Management: Forms now properly clear data and errors when switching between zones (#769)

📧 Mail & SMTP

Email functionality is now more reliable:

• SMTP Authentication: Resolved authentication and response parsing issues that were causing email delivery problems

• Header Validation: Removed invalid SMTP headers that were causing server rejections (#774)

🔌 API & Infrastructure

Backend infrastructure improvements for better reliability:

• API Routing: Resolved routing and method validation issues that were affecting API reliability (#767)

• Docker Improvements: Fixed container startup validation logic for smoother deployments (#766)

📦 Upgrade Information

This is a recommended update for all Poweradmin users. The upgrade process requires running a database migration script specific to your database type.

⚠️ Important: Database Migration Required

Before upgrading, you must run the appropriate SQL migration file for your database:

• MySQL: sql/poweradmin-mysql-update-to-4.0.2.sql

• PostgreSQL: sql/poweradmin-pgsql-update-to-4.0.2.sql

• SQLite: sql/poweradmin-sqlite-update-to-4.0.2.sql

Migration Steps:

1. Backup your existing database

2. Run the appropriate SQL file for your database type

3. Update to v4.0.2

The migration scripts fix critical issues with password reset tokens and ensure your database schema is properly aligned with the new version.

🚀 What’s Cooking Next

The next major release of Poweradmin will bring significant enhancements across authentication, user interface, and system architecture. Here’s what’s coming:

🔐 Authentication & Security

• SAML Authentication: Full SAML support with automatic user provisioning (#789)

• OIDC/OAuth Integration: Support for Google, Azure AD, and Keycloak authentication (#791)

• User Avatars: Avatar support via OAuth providers and Gravatar integration

• User Preferences: Comprehensive user preferences management system

🔌 API Improvements

• Enhanced Security: Permission validation for all API endpoints

• User Empowerment: API key management permissions for non-admin users

🎨 Modern UI Theme (#746)

• Bootstrap 5: Complete migration to Bootstrap 5 with modern sidebar layout

🏗️ Routing & Architecture

• Symfony Router: Modern routing system replacing the legacy BasicRouter

• Clean URLs: Modern URL structure without query parameters for better SEO and usability

🔄 Compatibility Updates

• Legacy Cleanup: Removed support for legacy inc/config.inc.php configuration files

Stay tuned for more updates, and as always, your feedback and contributions help shape the future of Poweradmin!

---

Poweradmin continues to grow stronger thanks to our active community. Special thanks to all users who reported these issues through GitHub issues #755 through #794, helping us identify and resolve these critical problems. Your detailed bug reports and testing make Poweradmin better for everyone.