3.0.3

Release 3.0.3 delivers comprehensive security fixes, core stability enhancements, WordPress OpenLiteSpeed reliability improvements, webmail UI refinements, and monitoring upgrades.

Highlights & Fixes​

1. Extended Client Session Lifetime​

• Increased client session expiration and cookie duration to 31 days (from 300 minutes default), preventing unexpected mid-session disconnects while maintaining full token validation and security controls.

2. WordPress on OpenLiteSpeed Reliability​

• Resolved the "No input file specified" error on OpenLiteSpeed by aligning virtual host configuration and document roots.
• Fixed the warning Could not read the debugging settings: Domain is not provided by properly forwarding domain parameters to the WP-CLI debug and site information endpoints.
• Resolved scan detection issues where WordPress installations configured with www. prefix failed to detect domain IDs.

3. Git Deployment​

• Fixed false positive detection in Git Deployment where unattached sites were incorrectly recognized as active Git deployments.

4. Cache & Memory Services Isolation​

• Enhanced multi-tenant isolation and user permissions for Memcached, OpenSearch, and Elasticsearch across system setups.
• Added native caching script handlers and permission boundaries.

5. Varnish & Web Hosting Performance​

• Fixed Varnish under user accounts on native stack environments by restoring missing handler scripts and proper socket routing.

6. Real-time WAF & Firewall Events​

• Ensured real-time Coraza WAF decision logging and audit events per website.

7. Uptime & Sentinel Monitoring​

• Fixed sentinel login deduplication to prevent reporting the same login multiple times.
• Fixed cron job syntax and automated health probes.

8. WebMail UI​

• Increased WebMail client brand logo display sizing for improved visibility in sidebar and authentication cards.

9. WHMCS & SSO Integration​

• Secured WHMCS "Login to Panel" SSO flow with ticket-based authentication, resolving CSRF token missing / Origin: null rejection on auto-submit POST.

10. Security Hardening​

• SQL injection protection across FTP and domain scripts via sql_escape().
• Command injection protection across SSH credentials in server migration and user transfer.
• Hardened permissions on sensitive directories and configuration files.