A new version of phpList is now ready for download, introducing several changes.

You can get a copy of phpList 3.7.0 from the Download page and SourceForge. If you prefer the Dockerized version of phpList you can get a copy from Docker Hub.

Security

Security has been strengthened in several areas of the application:

• Added CSRF verification for delete actions to help protect against unauthorized requests. https://github.com/phpList/phplist3/pull/1121
• Prevented unsubscribe requests from being processed through HTTP HEAD requests. https://github.com/phpList/phplist3/pull/1086
• Added an option to verify SSL connections for improved security when connecting to external services. https://github.com/phpList/phplist3/pull/1107

Core Improvements

• Improved IP address detection, including better support for IPv6 environments. https://github.com/phpList/phplist3/pull/1084

Authentication

• Added SAML authentication support for administrator login, enabling integration with single sign-on (SSO) providers. https://github.com/phpList/phplist3/pull/1064

API

• REST API support, providing a foundation for integrations and external application access. https://github.com/phpList/phplist3/commit/98846b2a845b6101983041d6f434a1e7daf1e63a

Bounce Processing

• IMAP-based bounce processing through the IMAP2 plugin. Added so phpList’s bounce processing still works on PHP setups without the native imap extension (which got unbundled from PHP 8.4) https://github.com/phpList/phplist3/pull/1063

Campaigns

• Fixed RSS subject placeholder handling in campaign notification emails. https://github.com/phpList/phplist3/pull/1103

User Interface

• Added list descriptions to the Lists page. https://github.com/phpList/phplist3/pull/1108
• Added support for pre-selecting subscription lists on the subscribe page. https://github.com/phpList/phplist3/pull/1111

Plugins and Integrations

• Added support for CKEditor 5. https://github.com/phpList/phplist3/pull/1071
• Updated the CKEditor integration. https://github.com/phpList/phplist3/pull/1081
• Updated the Common plugin. https://github.com/phpList/phplist3/pull/1085
• Updated the Updater plugin. https://github.com/phpList/phplist3/pull/1085

Translations

• Updated the phplist-lan-texts package to the latest version, including translation and language updates. https://github.com/phpList/phplist3/pull/1109