Directadmin Docs

Version 1.688

Released: 2025-10-28

One-Click Roundcube Login to support webmail.domain.com new

New option for the RoundCube SSO login, ability to set:

da config-set one_click_webmail_link 'https://webmail.domain.com' --restart

where the default value will remain as /roundcube.

More information in the documentation.

File Manager "Create File" now uses a new API endpoint evolution update

The Create File action in File Manager now uses a new API endpoint, replacing the previous one.

Cleaner search in File Manager evolution update

The file and folder search in File Manager now has a cleaner look that matches the regular page search, making it easier to use.

File Manager search modal

Protected directories editing improvements evolution update

The protected directory edit page features an updated design with a clean, modern interface that aligns with newer pages and improves usability.

Protected directory view

Software version changes custombuild update

  • ioncube (PHP extension) updated from 14.4.1 to 15.0.0
  • MySQL 8.0 updated from 8.0.43 to 8.0.44
  • MySQL 8.4 updated from 8.4.6 to 8.4.7
  • ngx_cache_purge updated from 2.5.3 to 2.5.4
  • PHP 8.3 updated from 8.3.26 to 8.3.27
  • PHP 8.4 updated from 8.4.13 to 8.4.14

Prevent access to DNSSEC page when disabled evolution fix

It is no longer possible to access user level DNSSEC page when user_dnssec_control is set to 0 in directadmin.conf.

Fixed /CMD_API_DNS_CONTROL handler validation for DNS record type parameter fix

Validation logic for /CMD_API_DNS_CONTROL is updated to correctly report errors about malformed DNS entry parameter values.

Global disabled ModSecurity for Nginx web server fix

ModSecurity configuration templates are updated to support disabling ModSecurity in global configuration but still keeping it enabled for some of the domains.

It was possible to have this configuration with the Apache web server, but with the Nginx web server, global ModSecurity would always be turned on. With this release, both the Apache and the Nginx web servers work the same.

The difference between web servers was caused by different libmodsecurity versions being used. With ModSecurity version 3, the first flag definition in a single scope is always used. With ModSecurity v2, the last flag definition in a single scope is preferred.

Legacy /CMD_MODSECURITY endpoint no longer supports action=log parameter removal

The endpoint /CMD_MODSECURITY no longer returns the ModSecurity log with the action=log parameter. The log is available with the new API endpoints:

  • /api/modsecurity-audit-log/summary - key data from the ModSecurity log.
  • /api/modsecurity-audit-log/entry - more detailed information about a single event in the log.

The legacy endpoint was not used by the Evolution skin. The Enhanced skin is updated to redirect users to the new API endpoint.

Removed enable_threads configuration option from directadmin.conf removal

Multi-server configuration will automatically use concurrent requests to multiple servers on the supported actions.

The option enable_threads to enable or disable threads for multi-server actions is removed from the directadmin.conf file.

Updated codebase supports Zip archives out of the box and stops relying on system zip tools. This renders zip related fields in directadmin.conf non-functional.

The following fields are removed from directadmin.conf:

  • zip
  • zip_bin
  • unzip_bin
  • extra_unzip_option

Set Php Version Hook new

New hook has been added for Users, when they set a given php version.

set_php_version_pre.sh

This will allow the Admin to restrict older php versions to be saved, as needed. More information in the documentation

Last Updated: