- The Delete buttons on the Backups page now carry a CSRF token, so another website can no longer make an administrator's browser delete a backup. A delete without a valid token is refused with The page had expired, so nothing was deleted.
- The Delete and Restore confirmation dialogs now work with any filename. Archives added from the backup directory (new in 1.4.0) keep their own names, and a name containing an apostrophe skipped the Delete confirmation, while a crafted name could run script in the administrator's browser.
Backup
Releases
1.4.1
Oct 15, 2026
1.4.0
Oct 15, 2026
- Archives too large to upload can be copied into the backup directory with FTP, SFTP or SSH and restored from there. The Backups page lists ZIP files in the backup directory that are not in the list under Archives in the backup directory, flags files that may still be arriving, and adds one with Add to backups. A background job checks every file in the archive against the ZIP's CRC-32 checksums and records its SHA-256 checksum before it is marked complete, so a damaged transfer is caught before a restore.
- New
importcommand forbin/backup.phpadds such archives from the shell, andlistshows the ones not in the list yet. - The Upload Backup page shows the server's upload limit and where to copy larger archives.
- Restores check every unpacked file against the ZIP's CRC-32 checksums and the free space in the temporary directory before changing anything. PHP's unzip reports success even when a file fails its checksum, so an archive with a damaged file used to be restored with that file corrupted.
- After a database restore, the archive you restored from stays in the list as complete. It used to reappear as in progress, the state it was in when the dump was written, and could no longer be restored.
- Backups that are listed but whose ZIP is missing, such as records restored from another server's database, show file missing instead of Download and Restore buttons.
- New backups record the Omeka S version in
metadata.json. The restore preview shows it, along with when the archive was made, and warns when the archive comes from a newer Omeka S than the one installed. - A restore holds the backup lock, so no backup can start while it runs.
- Fixed the "files files" wording on the Create Backup and Restore pages.
1.3.1
Oct 15, 2026
- The Backup entry in the admin menu showed its text in a serif fallback
font: the link carried Font Awesome's
faclass, which sets the whole link in the icon font. It now carries only the icon class, like the other menu entries.
1.3.0
No release notes.
1.1.0
No release notes.
1.0.5
No release notes.
1.0.4
No release notes.
1.0.3
No release notes.
1.0.2
No release notes.
1.0.1
No release notes.
1.0.0
No release notes.