Recent posts

#1

General / Re: jD 4.1.8 Release

Last post by ColinM - 07.11.2026 18:30:21

It seems that some more Security items have been identified.  So in consequence version 4.1.8 is delayed - it is estimated to be cleared for release by Wednesday 11th or Thursday 12th.
ColinM

#2

General / Re: Download counter

Last post by Arno - 05.11.2026 11:11:33

Hi Ingo,
thank you for investigating this and sharing your solution. The UTC adjustment looks plausible, and I have noted it for verification and inclusion in a future maintenance release.

Version 4.1.8 is already frozen and focuses on security fixes, so this change will not be included in that release.

The release of version 4.1.8 is scheduled for tomorrow.

Best regards
Arno

#3

General / Re: "You do not have permissio...

Last post by Arno - 02.11.2026 18:13:35

Hi,
thanks for sharing your findings and proposed fix. This issue has already been addressed in jDownloads 4.1.8, including compatibility with strict MySQL configurations. The new version will be released later this week.

#4

General / That's a familiar challenge!

Last post by KyleCarey - 28.10.2026 10:10:36

 I've definitely run into situations where I needed to grant very specific, granular access without overhauling my entire ACL. It's always a balancing act between security and keeping things manageable. I'm curious to see what solutions people suggest for jDownloads.

#5

General / Re: "You do not have permissio...

Last post by jeery2212 - 26.10.2026 21:41:14

Hello Arno,

Using an AI assistant, I started from the DownloadController.php file of version 4.1.7 and added a few lines to fix the problem.

AI message:
I added a variable right after $now_date (lines 709-710):

php
$null_date = '0000-00-00 00:00:00';

In the 3 blocks, the conditions now also accept the zero date:

php
$query->where('(a.publish_up IS NULL OR a.publish_up = ' . $db->quote($null_date) . ' OR a.publish_up <= ' . $db->quote($now_date) . ')');
$query->where('(a.publish_down IS NULL OR a.publish_down = ' . $db->quote($null_date) . ' OR a.publish_down >= ' . $db->quote($now_date) . ')');

The rest of the file is unchanged. The onBeforeDownloadAuthorizeJD security hook and the date checks for genuinely expired or scheduled files are preserved.

Here is the corrected file, which seems to work:

DownloadController.php

#6

General / Re: jDownloads Rating Issue

Last post by ColinM - 25.10.2026 17:28:44

Hi
I have updated the documentation on Rating Downloads to clarify and resolve the issue
Colin

#7

General / Re: Download counter

Last post by IngoLammers - 25.10.2026 14:47:32

Problem also resolved. The issue lies within this file. The time query should be handled using UTC time; otherwise, the setting will not take effect.

Code Select Expand

httpdocs/components/com_jdownloads/src/Helper/JDHelper.php
Search for this line within the function in the editor.

Code Select Expand

$query->where('log_datetime <= NOW() AND log_datetime >= (NOW() - INTERVAL '.$duration.' MINUTE)');
Replace them with:

Code Select Expand

$query->where('log_datetime <= UTC_TIMESTAMP() AND log_datetime >= (UTC_TIMESTAMP() - INTERVAL '.$duration.' MINUTE)');

#8

General / Re: jDownloads Rating Issue

Last post by IngoLammers - 25.10.2026 14:35:27

I've solved the problem. A setting was configured incorrectly: "Remove empty HTML tags" must be disabled; otherwise, the content will be deleted.

#9

General / Re: "You do not have permissio...

Last post by jeery2212 - 16.10.2026 19:03:08

Regarding security: as a precaution, I used this site https://manage.mysites.guru/ with the plugin to analyze the back office. Nothing abnormal was detected, but there is no 100% guarantee that my site is clean.

I agree with you: the download issue and the security issue are two separate topics.

#10

Bugs! / Re: Bug in restore functionali...

Last post by Arno - 16.10.2026 18:32:36

The issue has already been resolved in the upcoming update 4.1.8.
Thanks.