Changelog

Version 2.5.1.4 “Space Invader” (13/08/2026)

• Calendar feature (beta) added; however, it can be completely disabled via the settings
  • Month/Week/Day view
  • Create, edit, move (via drag & drop), and delete events
  • Reminder time can be set individually for each event (none/at start time/5 min–1 day in advance)
  • Month/Year quick selection (“Go to”) in the top-left corner
  • Import of .ics files (including those with multiple events, e.g., from Google Calendar)
  • Export individual events as .ics
  • Holiday calendar: all 16 German states, calculated automatically (not saved), visible only if language = German
  • Birthday calendar: separate category, can be shown or hidden
  • Show/hide toggle for holidays/birthdays, state selection in the top right corner
  • Calendar function can be completely enabled or disabled in Settings (the “Other” tab), including migration of existing installations
• Image viewer updated
  • Now reads EXIF data
  • Image arrow keys added to the bottom left edge
  • “Zoom in” function added—additional EXIF data is then displayed
• Bug fix: Settings tabs now display correctly in dark mode
• Visibility of the “Save” status in the mini-editor (beta) improved (badge implemented)
• “Messages” modal with two tabs: ‘Notifications’ (API only) and “Calendar Entries”
• Mini Editor (Beta): Badge added for save status (better readability)
• New documents can now also be created by pressing “Enter”
• Bug fixes implemented in the Mini Editor (Beta) (formatting—bold, lists—was lost when deleting blank lines)
• The activity log now records (almost) all actions (e.g., creating, deleting, or moving files/folders; changing settings; creating or deleting calendar entries; sharing files)
• The Login and Help buttons in the login area are now side by side instead of one below the other

Version 2.5.1.3 “Space Invader” (09/08/2026)

• Added logo animation
• Animated various buttons
• Segmented settings into categories
• Added background image manager
• Added image viewer
• Action buttons have been made smaller and are hidden unless the cursor hovers over a row
• Search results are now highlighted in the accent color instead of green
• Added some fine-tuning
• Bug fix: If a file is renamed, it can now be deleted without having to reload the page first

Version 2.5.1.2 “Space Invader” (09/06/2026)

• Changes implemented so that virus scanners no longer detect DropYet as malware or a spammer
• Feature implemented to prevent sending via manipulated email addresses
• Code injection vulnerability fixed when writing to config_user
• Markdown text editor moved to /include
• rename_files.php moved to /include (was temporarily integrated into index.php, but caused the malware scanner to trigger)
• Improvements to the mini-editor:
  • Target path verification: dyAssertPathInsideDaten()
  • Implementation of size limits and prevention of saving as soon as code is detected in .txt/.md files (<?php, <?=, and <%)—dyEditorContentIsSafe()
  • Every edit or creation of a text file is now successfully logged
• When creating text files or moving files, it is now possible to search for nested folders (results are cached)

Version 2.5.1.1 “Space Invader” (09/06/2026)

• Added folder search to the move function and text file creation

Version 2.5.1.0 “Space Invader” (09/06/2026)

• Added flag icons to the language selection in Settings
• Added color swatches to the color selection in Settings
• A series of dark mode bug fixes ensure improved display in dark mode
• Added a simple .txt and .md editor
• Added a button to create .txt and .md files – .txt and .md files now automatically open in the editor, but can still be downloaded
• DropYet no longer needs to reload for every action; it now only loads relevant system components
• Added an animated green checkmark when a file or folder has been successfully renamed
• When settings are saved, the page now automatically reloads the settings
• All non-Bootstrap modals are now Bootstrap modals
• Bug fix: Sharing files in subfolders was sometimes not possible
• Bug fix: When deleting multiple files at once, the file counter in the menu bar now disappears again
• Bug fix: Files in subfolders could sometimes not be moved

Version 2.5.0.2 “Space Invader” (09/03/2026)

• The “Add” button now opens the operating system’s file dialog directly, without displaying a modal window
• Added an improved progress bar for file uploads, which now also works for drag-and-drop uploads
• Bug fix: Two-factor authentication can now be used even after updating from an older version, provided the settings were not saved again beforehand
• A warning is now displayed if DropYet is running on PHP version < 8
• The menu is now pinned and remains at the top even when the user scrolls
• Security fixes that prevent certain program elements from being displayed when the user is not logged in (Gatekeeper)
• The language has been updated for the “Reset Password” and “Reset Two-Factor Authentication” sections
• Design fixes (including replacement of missing Glyphicons)

Version 2.5.0.1 “Space Invader” (08/31/2026)

• Implemented SHA-256 checksum verification for updates
• Implemented file protection for updates (also prevents virus scanners from being triggered)

Version 2.5.0.0 “Space Invader” (08/31/2026)

• Implemented a new system for sharing files and folders with an expiration feature and optional password protection
• “Shared” tab added to the menu
• Public mode has been removed ➔ Files are migrated to public_old (shared items must be set up again)
• bcrypt implemented as the new password algorithm ➔ Migration to the new algorithm occurs by resetting the password in the settings (SHA512 remains as a fallback until migration is complete)
• Added telemetry opt-out ➔ Anonymous telemetry data will not be transmitted if desired
• Added multi-select for the “Delete” and “Move” actions next to filenames
• Added animations for the delete and move processes
• Delete confirmation (pop-up) now appears in the DropYet design
• Color in the Move menu changed to blue
• Demo mode added ➔ Simplifies the deployment of the latest DropYet version as a demo version
• This update deletes the old /public directory and the /include/search_public.php file (personal files are preserved)

Version 2.4.7.6 “Space Invader” (08/28/2026)

• Bug fix: The password or two-factor authentication code could not be reset if a custom background image had been set

Version 2.4.7.5 “Space Invader” (08/28/2026)

• Bug fixes and security patches in the update system
  • A trusted HTTPS verification of the update channel is enforced
  • Prevention of man-in-the-middle attacks when retrieving the update.json file and the ZIP package
  • A dedicated validation function checks every path before write, move, or delete operations
  • Sequences are consistently blocked, and resolved paths are checked to ensure they are strictly within the application directory (__DIR__)
    Before the actual extraction, all paths contained in the ZIP archive are validated
  • Escaping the target directory via specially crafted archives is effectively prevented – remotely specified delete and move commands are executed only after successful path validation
• New disk space analysis categorized by file type and displays upload activity from the last 30 days
• Disk space analysis moved to the top; credits moved to the bottom
• New system implemented to reset passwords and 2-factor codes
• Link to the Update tab added to the menu (displays key features of the latest version)
• Bug fix: Translation error
• Bug fix: Translation updated to reflect new features
• Minimum required PHP version set to 8
• This update deletes the old directories /resetpw, /reset2fa, /public/resetpw, and /public/reset2fa

Version 2.4.7.4 “Space Invader” (08/27/2026)

• Two-factor authentication can now be reset if an email address has been provided
• Clicking on the directory path in the search now takes you to the directory containing the file you’re looking for
• Telemetry feature added (tracks the current version and whether DropYet was active in the last 7 days)
• New update feature added—updates now occur directly within the DropYet interface, and their status can be tracked; additionally, the updater can now move or delete files that are no longer needed
• The “About” tab now displays a note indicating that DropYet development is supported by AI
• Start of the transformation of DropYet’s file structure—some functions are now moved to separate files (/include)
• The “Reload” link after saving settings is now a button—clickability has been improved
• Bug fix: Outdated readme.html
• Bug fix: Default backgrounds do not load on the login page of Public Mode

Version 2.4.7.3 “Space Invader” (08/01/2026)

• Two-factor authentication implemented
• Notifications are now sorted from newest to oldest
• Validity date, expiration date, and version checker notifications added to notifications
• cURL removed; the current DropYet version is now retrieved via a new API
• Minor visual adjustments

Version 2.4.7.2 “Space Invader” (08/01/2026)

• Implemented improved notifications that can now be marked as “read” (JSON)

Version 2.4.7.1 “Space Invader” (08/01/2026)

• Added file search
• Added an option to enable any custom background image via URL
• A new “Glass” look is enabled when a custom background image is added
• Menu slightly restructured
• Fixed language errors
• Fixed bugs in the code

Version 2.4.7 “Space Invader” (07/27/2026)

• Added multi-file upload
  • It is now possible to upload multiple files at once
• Added drag-and-drop file upload
  • Files can now simply be dragged into the browser window and will be uploaded automatically
• Added file move functionality
  • Files can now be moved both within and between the two modes
• Fixed the rename bug in “Private” mode
• Fixed a Content Security Policy issue
• Added icons to buttons, window titles, and menus
• Restructured the menu
• Redesigned the “Security” tab
• Minor code cleanup and optimizations

Version 2.4.6.15 “Space Invader” (07/26/2026)

• Fixed a language error in the German language file
• The default background is now “Mountain Clouds”
• The default color for the color bar has been changed to “Blue”
• Fixed a bug where the security code was not updated when the password was changed via the settings
• Fixed a bug in the installation script
• Added a “Go Directly to DropYet” button to the installation window

Version 2.4.6.14 “Space Invader” (11/04/2024)

• Fixed a bug where a warning message could be displayed when trying to reset the password
• Corrected spelling mistakes

Version 2.4.6.12 “Space Invader” (10/31/2024)

• Fixed a bug where a warning message could be displayed when uploading a file
• Fixed a bug where a warning message could be displayed when you try to reset your password
• Fixed a bug where a warning message could be displayed if you have not yet fully installed your DropYet

Version 2.4.6.11 “Space Invader” (08/22/2024)

• Adjustments in the code to make DropYet usable under PHP 8 and higher
• DropYet now generates a new security code as soon as the password has been changed using the “Reset password” function. This means that the password cannot be changed a second time via the same link.
• The menu item “Connection information” is now only visible as soon as you have logged in
• Note on the use & necessity of the e-mail address implemented in the installation tool

Version 2.4.6.10 “Space Invader” (08/18/2024)

• New update system (beta) integrated. This should ensure more reliable updates.
• Information banner now appears if password cannot be reset
• A longer security code is now generated (24 characters, consisting of numbers and letters)

Version 2.4.6.9 “Space Invader” (08/18/2024)

• Announcements in the menu bar now have an expiration date and are no longer forgotten there
• Removed function for using a random Unsplash background image (no longer possible from Unsplash)
• Translations adjusted
• Removed script that should count the number of DropYet installations
• “Reset password” function added

Version 2.4.6.8 “Space Invader” (12/23/2022)

• Removed option to send log via email
• Added option to export log.txt (replaces mail-option)
• Minor fixes in installer tool

Version 2.4.6.7 “Space Invader” (08/09/2022)

• Darkmode is no more a beta version
• Adjusted and darkened colors of darkmode
• Replaced shortlink linkin in top menu with a external service
• Removed QR-Code linking from top menu

Version 2.4.6.6 “Space Invader” (04/01/2021)

• Date in DropYet-License updates
• Notification tool added (DropYet can now show dynamic developer news)
• Credits reworked
• DropYet can now detect if it’s not set up and will now help you to find the setup tool
• Security code can now be regenerated manually via “Security”-Tab
• Bug fixed, where you could have accessed the private date even if there was a security code
• Security cookie will now be directly deleted after log out
• You should now have no more access to the upload window if you are not logged in

Version 2.4.6.5 “Space Invader” (03/29/2021)

• Credits added
• DropYet now generates a security code to safe your data vor unwanted accesses. (After update to 2.4.6.5 you have to generate this code once. If you install a fresh copy, DropYet will do that for you)
• DropYet can now check if there is a security code
• Darkmode added (beta)
• New Logo in “About”-Tab”
• “That’s new…”-Button added – will be shown if there is a new update available
• Added notification in main view if log was sent via email
• Corrected max. characters to 70 when renaming files & folders
• Username will now be shown in a blue badge in lower left-hand corner

Version 2.4.6.4 “Space Invader” (2020)

• Log can now be activated and deactivated in settings menu
• New notification, that DropYet’s settings changes will take affect after a page reload

Version 2.4.6.3 “Space Invader” (2019)

• DropYet now displays the correct font “Lato” on Macs

Version 2.4.6.2 “Space Invader”

• update-button will now be deactivated if you already have the latest version
• fixed bug in updatesystem

Version 2.4.6.1 “Space Invader”

• DropYet now informs you if a new update is available
• different technology to get latest version

Version 2.4.6 “Space Invader”

• updated “About”-tab
• DropYet now checks for latest version in “About”-tab (beta)
• DropYet shows warning if it can’t check latest version
• added updatefunction (beta)
• implemented .axx as “crypto”-format
• DropYet now sends an e-mail if someone changed the settings
• updates link to documentations in “readme”-file
• added a Firefox compatibility mode (“Delete”-button will now be replaced with a link when using Firefox)
• added random-background as option (using Unsplash)
• changed “Settings”-menu a bit

Version 2.4.5 “Space Invader”

• integrated new login screen
• you can now choose between 10 different wallpapers in login (more options soon)
• added PHP-version of your server in the “About”-Tab as general information (for problems etc.)
• added link to file encryption tool “Encrypto”
• DropYet can now detect the most common encrypted filetypes and symbolizes them with a golden lock
• updates link to documentations
• changed icon for “previous directory”
• updated “Safety”-tab
• improved visibility
• updated language
• removed bugs
• updated “About”-tab

Version 2.4.4.1 “Space Invader”

• replaced md5-encryption with SHA512 – improves security especially with long passwords
• added Spanish as language
• added new password analyzer
• if no email added in settings, the “send log”-button will be disabled

Version 2.4.4 “Space Invader”

• added md5-encryption (password will no longer be saved in clear text)
• added file renaming – you can now rename files and folders with a double click next to the item
• changed settings so that you have to confirm that you want to change your password
• removed password analyzing tool because md5 makes passwords unreadable

Version 2.4.3 “Space Invader”

• changed look of security overview a bit for more visibility
• corrected the file counter so the “.htaccess”-file will not be counted anymore
• removed Edge from “incompatible browser”-list due to big improvement in Microsoft’s Edge Browser in Windows 10 Update 1803
• added a upload progress bar (still needs some improvement)
• added a DropYet-Logo in readme-file
• updated browser database
• corrected bug in settings where current language isn’t readable after installation
• changed loading bar – loading bar will now take the look of the current set ambient color in settings and is bigger

Version 2.4.2 “Space Invader”

• decent warning for temporarily not fully supported Edge-Browser (by all of our services)
• changed to newer Bootstrap Version
• corrected htaccess-files
• improved mobile view a bit
• replaced bootstrap.min.js with bootstrap.js because of incompatibility

Version 2.4.1 “Space Invader”

• Warning for temporarily unsupported Firefox-Browser (updated Browser database) – (searching for solution)
• recommendation for Opera instead
• corrected some spelling mistakes

Version 2.4.0 “Space Invader”

• settings now show the current chosen option
• outdated files were deleted
• logo was replaced with .svg file to reduce load times
• browser-database was updated to detect outdated or incompatible browsers better
• log can’t be deleted without being logged in anymore
• DropYet now shows the overall size of the current mode and the overall size of both modes together with a nice chart
• DropYet now knows more filetypes (like .key, .ini, .dll) and gives them icons
• Bootstrap and jQuery were updated for more compatibility
• due to this, menus can now only closed by clicking in the “close”-button
• there is now only one install-file which can be used with different languages
• languages were updated
• statistics can now be used for the installation (experimental)
• the “about”-tab was updated
• the log can now send by a click of a button to the email set up in the settings
• the mobile view was optimized for smartphone-users (a bit)
• activity emails now also log the “user-agent” (Browser and OS)
• DropYet now gives you feedback about the security-status of your password
• the file chooser now can “speak” your language
• the “delete”-button now is red
• fixed a bug in the mobile view

Version 2.3.2 “Colorcode”

• added chinese as Language
• updated license
• added little icons in settings
• corrected some language mistakes
• updated browser database and added new dialog for outdated browsers
• updated the “Thanks to” list and the “About”-Tab
• updated time- and date formats
• added new beautiful Read-me-file

Version 2.3.1 “Colorcode”

• added “.htaccess”-file with some coding against cross-site scripting
• fixed a bug in the settings tab
• added feature that will dye your Android-Chrome header in the color you’ve chosen
• named it “Colorcode” (every version now will get a name… maybe)
• dyed favicons purple (DropYet color)
• added “save” and “upload” button next to “close” button for better accessibility
• added browser detection and warning
• updated documentations
• reduced DropYet in size

Version 2.3

• robots.txt (Searchengines will ignore your DropYet)
• Loading-bar (Site will appear when its loaded completely)
• New font (improved legibility)
• Logo (added new logo)
• Timeformat (available in settings)
• Cursor bug fixed
• License now opens in a tab
• You can now clear the log
• corrected spelling mistakes and other bugs

Version 2.2

• fixed big backdoor
• added username to the left-hand corner
• added SSL-detector for more safety
• improved language (a bit :D)
• added “About”-Tab with important information
• added license
• settings will no longer reset after change
• prepared things for the next version
• added thank-you list for developers
• added “Log”-Tab where you can access your Logs
• fixed some links

Version 2.1

• added english language
• added settings for colours of design
• added public and private mode
• added safety features like cookie encryption
• added new mime-type symbols